Github.Com Prometheus Client Golang vulnerabilities

1 known vulnerability affecting github.com/prometheus_client_golang.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-21698HIGH≥ 0, < 1.11.12022-02-16

CVE-2022-21698 [HIGH] CWE-400 Uncontrolled Resource Consumption in promhttp Uncontrolled Resource Consumption in promhttp This is the Go client library for Prometheus. It has two separate parts, one for instrumenting application code, and one for creating clients that talk to the Prometheus HTTP API. client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. ### Impact HTTP server