Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Prometheus Pushgateway FIPS could let attackers read data
published 2 months ago
Summary
The Prometheus Pushgateway FIPS package contains several security weaknesses that could allow an attacker to view or modify the data it handles, or cause the service to stop working. This could affect any system that uses this component to collect metrics. Upgrade to the latest package version as soon as possible to apply the fixes.
What to do
- Update cleanstart prometheus-pushgateway-fips to version 1.11.3-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | prometheus-pushgateway-fips |
< 1.11.3-r2 Fix: upgrade to 1.11.3-r2
|
Original advisory text
Security fixes in prometheus-pushgateway-fips 1.11.3-r2
Package prometheus-pushgateway-fips version 1.11.3-r2 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...
References
Timeline
Published1 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-MI38389 · OSV
Track software like this
Free during beta