3.14.0 / 2026-08-17

2026-08-18T08:51:30Z•a9a1037cac7fc8346b1a04607944d7a72219d503bfa5676f62238a1a169beb75

CVE-2026-53606CVE-2026-56852CVEPrometheusTSDBUIdependency-updategolang.org/x/textgoogle.golang.org/grpcreleasesanitize-htmlsecurity-update

Open source link →

What happened

Prometheus release feed showing version 3.14.0 and maintenance releases. Security updates include upgrading golang.org/x/text and google.golang.org/grpc in 3.13.2, and sanitize-html to 2.17.5 in 3.5.5 to address disclosed vulnerabilities. The feed also documents a TSDB query correctness fix and a crash-prevention fix when disk space is exhausted.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: prometheus_prometheus_releases
Record identifier: a9a1037cac7fc8346b1a04607944d7a72219d503bfa5676f62238a1a169beb75
Enrichment time: 2026-08-18T08:51:30Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records