Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display
Moderate severity
GitHub Reviewed
Published
Apr 27, 2026
in
prometheus/prometheus
•
Updated Jun 8, 2026
Give feedback on Dependabot alerts