Prometheus Client Golang vulnerabilities

1 known vulnerability affecting prometheus/client_golang.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-21698HIGHCVSS 7.5fixed in 1.11.12022-02-15

CVE-2022-21698 [HIGH] CWE-400 CVE-2022-21698: client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp pac client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests wi