Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
prometheus-fips 3.11.3 may let attackers run code
published 2 months ago
Summary
The Prometheus monitoring package called prometheus-fips, version 3.11.3, has several weaknesses that could let a remote attacker execute code or disrupt the service. This could expose your monitoring data or affect system stability. Upgrade to the newer 3.11.3‑r2 release as soon as possible to apply the fixes.
What to do
- Update cleanstart prometheus-fips to version 3.11.3-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | prometheus-fips |
< 3.11.3-r2 Fix: upgrade to 3.11.3-r2
|
Original advisory text
Security fixes in prometheus-fips 3.11.3-r2
Package prometheus-fips version 3.11.3-r2 fixes 15 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
References
Timeline
Published1 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-HW17175 · OSV
Track software like this
Free during beta