3.14.0-rc.0 / 2026-08-06

2026-08-12T08:51:31Z•e18a09d523454edb187b81337c13b6231a895e8aea4fd393de1253b0c391c814

CVE-2026-44990CVE-2026-53606CVE-2026-56852Go dependenciesLTSPrometheusUIXSScross-site-scriptinggRPCreleasesanitize-htmlsecurity-fix

Open source link →

What happened

Prometheus releases include security fixes for vulnerabilities in the sanitize-html UI dependency (CVE-2026-44990 and CVE-2026-53606) and dependency updates addressing CVE-2026-56852 plus a gRPC advisory (GHSA-hrxh-6v49-42gf). Prometheus 3.13.0, 3.5.5, and 3.13.2 contain the relevant fixes; upgrading is recommended.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: prometheus_prometheus_releases
Record identifier: e18a09d523454edb187b81337c13b6231a895e8aea4fd393de1253b0c391c814
Enrichment time: 2026-08-12T08:51:31Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records