Debian Golang-Github-Prometheus-Client-Golang vulnerabilities

1 known vulnerability affecting debian/golang-github-prometheus-client-golang.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-21698HIGHCVSS 7.5fixed in golang-github-prometheus-client-golang 1.11.1-1 (bookworm)2022

CVE-2022-21698 [HIGH] CVE-2022-21698: golang-github-prometheus-client-golang - client_golang is the instrumentation library for Go applications in Prometheus, ... client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when hand