v3.14.0-rc.0

2026-08-11T08:51:30Z•6770b4225294d2f992d1141af529a214515c4d4076fe66fea190987270407808

CVE-2026-44990CVE-2026-53606CVE-2026-56852PrometheusSIGBUSXSScross-site-scriptingdenial-of-servicegRPCgolang.org/x/textrelease-notessanitize-htmlsecurity-update

Open source link →

What happened

Prometheus releases include security fixes in versions 3.13.0, 3.5.5, and 3.13.2. Updates address cross-site scripting in the UI dependency sanitize-html and vulnerabilities in golang.org/x/text and google.golang.org/grpc. The 3.13.2 release also fixes a potential SIGBUS crash when the data disk is full.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: prometheus_prometheus_releases
Record identifier: 6770b4225294d2f992d1141af529a214515c4d4076fe66fea190987270407808
Enrichment time: 2026-08-11T08:51:30Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records