Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Prometheus Elasticsearch Exporter FIPS can be exploited, update now
published 7 months ago
Summary
The Prometheus Elasticsearch Exporter FIPS component contains several security weaknesses that could allow attackers to interfere with monitoring data. These problems are fixed in the latest release. Upgrade to the newest version as soon as possible to protect your system.
What to do
- Update cleanstart prometheus-elasticsearch-exporter-fips to version 1.10.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | prometheus-elasticsearch-exporter-fips |
< 1.10.0-r0 Fix: upgrade to 1.10.0-r0
|
Original advisory text
Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 1.10.0-r0
Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-61732 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61732 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-VD84830 · OSV
Track software like this
Free during beta