[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-42154":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":455,"aliases":456,"duplicate_of":9,"upstream":460,"downstream":461,"duplicates":486,"related":487,"reserved_at":9,"published_at":493,"modified_at":494,"state":495,"summary":496,"references_raw":505,"kevs":657,"epss":658,"epss_history":661,"metrics":850,"affected":860},"CVE-2026-42154","Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3.",null,[11,86,92],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,65,69,73,78],{"id":37,"name":38,"tactic":39},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":50,"name":51,"tactic":52},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":54,"name":55,"tactic":56},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":58,"name":59,"tactic":60},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":66,"name":67,"tactic":68},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":70,"name":71,"tactic":72},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},{"id":74,"name":75,"tactic":76},"D3-NTF","Network Traffic Filtering",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-ITF","Inbound Traffic Filtering",{"name":77},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],{"_key":87,"id":87,"name":88,"description":89,"type":15,"status":16,"abstraction":90,"likelihood_of_exploit":9,"capec":91},"CWE-789","Memory Allocation with Excessive Size Value","The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.","Variant",[],{"_key":93,"id":93,"name":94,"description":95,"type":15,"status":96,"abstraction":97,"likelihood_of_exploit":18,"capec":98},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","Incomplete","Base",[99,157,167,169,173,177,181,185,217,279,283,287,317,347,379,383,387,391,395,399],{"id":100,"name":101,"techniques":102},"CAPEC-125","Flooding",[103,131],{"id":104,"name":105,"tactics":106,"countermeasures":108},"T1498.001","Direct Network Flood",[107],{"id":33,"name":34},[109,111,113,115,117,119,121,123,125,127,129],{"id":37,"name":38,"tactic":110},{"name":40},{"id":42,"name":43,"tactic":112},{"name":40},{"id":46,"name":47,"tactic":114},{"name":40},{"id":50,"name":51,"tactic":116},{"name":40},{"id":54,"name":55,"tactic":118},{"name":40},{"id":58,"name":59,"tactic":120},{"name":40},{"id":62,"name":63,"tactic":122},{"name":40},{"id":66,"name":67,"tactic":124},{"name":40},{"id":70,"name":71,"tactic":126},{"name":40},{"id":74,"name":75,"tactic":128},{"name":77},{"id":79,"name":80,"tactic":130},{"name":77},{"id":29,"name":30,"tactics":132,"countermeasures":134},[133],{"id":33,"name":34},[135,137,139,141,143,145,147,149,151,153,155],{"id":37,"name":38,"tactic":136},{"name":40},{"id":42,"name":43,"tactic":138},{"name":40},{"id":46,"name":47,"tactic":140},{"name":40},{"id":50,"name":51,"tactic":142},{"name":40},{"id":54,"name":55,"tactic":144},{"name":40},{"id":58,"name":59,"tactic":146},{"name":40},{"id":62,"name":63,"tactic":148},{"name":40},{"id":66,"name":67,"tactic":150},{"name":40},{"id":70,"name":71,"tactic":152},{"name":40},{"id":74,"name":75,"tactic":154},{"name":77},{"id":79,"name":80,"tactic":156},{"name":77},{"id":158,"name":159,"techniques":160},"CAPEC-130","Excessive Allocation",[161],{"id":162,"name":163,"tactics":164,"countermeasures":166},"T1499.003","Application Exhaustion Flood",[165],{"id":33,"name":34},[],{"id":21,"name":22,"techniques":168},[],{"id":170,"name":171,"techniques":172},"CAPEC-197","Exponential Data Expansion",[],{"id":174,"name":175,"techniques":176},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":178,"name":179,"techniques":180},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":182,"name":183,"techniques":184},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":186,"name":187,"techniques":188},"CAPEC-469","HTTP DoS",[189],{"id":190,"name":191,"tactics":192,"countermeasures":194},"T1499.002","Service Exhaustion Flood",[193],{"id":33,"name":34},[195,197,199,201,203,205,207,209,211,213,215],{"id":37,"name":38,"tactic":196},{"name":40},{"id":42,"name":43,"tactic":198},{"name":40},{"id":46,"name":47,"tactic":200},{"name":40},{"id":50,"name":51,"tactic":202},{"name":40},{"id":54,"name":55,"tactic":204},{"name":40},{"id":58,"name":59,"tactic":206},{"name":40},{"id":62,"name":63,"tactic":208},{"name":40},{"id":66,"name":67,"tactic":210},{"name":40},{"id":70,"name":71,"tactic":212},{"name":40},{"id":74,"name":75,"tactic":214},{"name":77},{"id":79,"name":80,"tactic":216},{"name":77},{"id":218,"name":219,"techniques":220},"CAPEC-482","TCP Flood",[221,247,253],{"id":104,"name":105,"tactics":222,"countermeasures":224},[223],{"id":33,"name":34},[225,227,229,231,233,235,237,239,241,243,245],{"id":37,"name":38,"tactic":226},{"name":40},{"id":42,"name":43,"tactic":228},{"name":40},{"id":46,"name":47,"tactic":230},{"name":40},{"id":50,"name":51,"tactic":232},{"name":40},{"id":54,"name":55,"tactic":234},{"name":40},{"id":58,"name":59,"tactic":236},{"name":40},{"id":62,"name":63,"tactic":238},{"name":40},{"id":66,"name":67,"tactic":240},{"name":40},{"id":70,"name":71,"tactic":242},{"name":40},{"id":74,"name":75,"tactic":244},{"name":77},{"id":79,"name":80,"tactic":246},{"name":77},{"id":248,"name":249,"tactics":250,"countermeasures":252},"T1499.001","OS Exhaustion Flood",[251],{"id":33,"name":34},[],{"id":190,"name":191,"tactics":254,"countermeasures":256},[255],{"id":33,"name":34},[257,259,261,263,265,267,269,271,273,275,277],{"id":37,"name":38,"tactic":258},{"name":40},{"id":42,"name":43,"tactic":260},{"name":40},{"id":46,"name":47,"tactic":262},{"name":40},{"id":50,"name":51,"tactic":264},{"name":40},{"id":54,"name":55,"tactic":266},{"name":40},{"id":58,"name":59,"tactic":268},{"name":40},{"id":62,"name":63,"tactic":270},{"name":40},{"id":66,"name":67,"tactic":272},{"name":40},{"id":70,"name":71,"tactic":274},{"name":40},{"id":74,"name":75,"tactic":276},{"name":77},{"id":79,"name":80,"tactic":278},{"name":77},{"id":280,"name":281,"techniques":282},"CAPEC-486","UDP Flood",[],{"id":284,"name":285,"techniques":286},"CAPEC-487","ICMP Flood",[],{"id":288,"name":289,"techniques":290},"CAPEC-488","HTTP Flood",[291],{"id":190,"name":191,"tactics":292,"countermeasures":294},[293],{"id":33,"name":34},[295,297,299,301,303,305,307,309,311,313,315],{"id":37,"name":38,"tactic":296},{"name":40},{"id":42,"name":43,"tactic":298},{"name":40},{"id":46,"name":47,"tactic":300},{"name":40},{"id":50,"name":51,"tactic":302},{"name":40},{"id":54,"name":55,"tactic":304},{"name":40},{"id":58,"name":59,"tactic":306},{"name":40},{"id":62,"name":63,"tactic":308},{"name":40},{"id":66,"name":67,"tactic":310},{"name":40},{"id":70,"name":71,"tactic":312},{"name":40},{"id":74,"name":75,"tactic":314},{"name":77},{"id":79,"name":80,"tactic":316},{"name":77},{"id":318,"name":319,"techniques":320},"CAPEC-489","SSL Flood",[321],{"id":190,"name":191,"tactics":322,"countermeasures":324},[323],{"id":33,"name":34},[325,327,329,331,333,335,337,339,341,343,345],{"id":37,"name":38,"tactic":326},{"name":40},{"id":42,"name":43,"tactic":328},{"name":40},{"id":46,"name":47,"tactic":330},{"name":40},{"id":50,"name":51,"tactic":332},{"name":40},{"id":54,"name":55,"tactic":334},{"name":40},{"id":58,"name":59,"tactic":336},{"name":40},{"id":62,"name":63,"tactic":338},{"name":40},{"id":66,"name":67,"tactic":340},{"name":40},{"id":70,"name":71,"tactic":342},{"name":40},{"id":74,"name":75,"tactic":344},{"name":77},{"id":79,"name":80,"tactic":346},{"name":77},{"id":348,"name":349,"techniques":350},"CAPEC-490","Amplification",[351],{"id":352,"name":353,"tactics":354,"countermeasures":356},"T1498.002","Reflection Amplification",[355],{"id":33,"name":34},[357,359,361,363,365,367,369,371,373,375,377],{"id":37,"name":38,"tactic":358},{"name":40},{"id":42,"name":43,"tactic":360},{"name":40},{"id":46,"name":47,"tactic":362},{"name":40},{"id":50,"name":51,"tactic":364},{"name":40},{"id":54,"name":55,"tactic":366},{"name":40},{"id":58,"name":59,"tactic":368},{"name":40},{"id":62,"name":63,"tactic":370},{"name":40},{"id":66,"name":67,"tactic":372},{"name":40},{"id":70,"name":71,"tactic":374},{"name":40},{"id":74,"name":75,"tactic":376},{"name":77},{"id":79,"name":80,"tactic":378},{"name":77},{"id":380,"name":381,"techniques":382},"CAPEC-491","Quadratic Data Expansion",[],{"id":384,"name":385,"techniques":386},"CAPEC-493","SOAP Array Blowup",[],{"id":388,"name":389,"techniques":390},"CAPEC-494","TCP Fragmentation",[],{"id":392,"name":393,"techniques":394},"CAPEC-495","UDP Fragmentation",[],{"id":396,"name":397,"techniques":398},"CAPEC-496","ICMP Fragmentation",[],{"id":400,"name":401,"techniques":402},"CAPEC-528","XML Flood",[403,429],{"id":190,"name":191,"tactics":404,"countermeasures":406},[405],{"id":33,"name":34},[407,409,411,413,415,417,419,421,423,425,427],{"id":37,"name":38,"tactic":408},{"name":40},{"id":42,"name":43,"tactic":410},{"name":40},{"id":46,"name":47,"tactic":412},{"name":40},{"id":50,"name":51,"tactic":414},{"name":40},{"id":54,"name":55,"tactic":416},{"name":40},{"id":58,"name":59,"tactic":418},{"name":40},{"id":62,"name":63,"tactic":420},{"name":40},{"id":66,"name":67,"tactic":422},{"name":40},{"id":70,"name":71,"tactic":424},{"name":40},{"id":74,"name":75,"tactic":426},{"name":77},{"id":79,"name":80,"tactic":428},{"name":77},{"id":104,"name":105,"tactics":430,"countermeasures":432},[431],{"id":33,"name":34},[433,435,437,439,441,443,445,447,449,451,453],{"id":37,"name":38,"tactic":434},{"name":40},{"id":42,"name":43,"tactic":436},{"name":40},{"id":46,"name":47,"tactic":438},{"name":40},{"id":50,"name":51,"tactic":440},{"name":40},{"id":54,"name":55,"tactic":442},{"name":40},{"id":58,"name":59,"tactic":444},{"name":40},{"id":62,"name":63,"tactic":446},{"name":40},{"id":66,"name":67,"tactic":448},{"name":40},{"id":70,"name":71,"tactic":450},{"name":40},{"id":74,"name":75,"tactic":452},{"name":77},{"id":79,"name":80,"tactic":454},{"name":77},[],[457,458,459],"GHSA-8rm2-7qqf-34qm","BIT-prometheus-2026-42154","GO-2026-5264",[],[462,464,466,468,470,472,474,476,478,480,482,484],{"_key":463},"OPENSUSE-SU-2026:10676-1",{"_key":465},"SUSE-SU-2026:2768-1",{"_key":467},"SUSE-SU-2026:2774-1",{"_key":469},"UBUNTU-CVE-2026-42154",{"_key":471},"DEBIAN-CVE-2026-42154",{"_key":473},"RHSA-2026:25039",{"_key":475},"RHSA-2026:25245",{"_key":477},"RHSA-2026:29770",{"_key":479},"RHSA-2026:34357",{"_key":481},"RHSA-2026:34359",{"_key":483},"RHSA-2026:36796",{"_key":485},"RHSA-2026:41019",[],[488,489,490,491],{"_key":463},{"_key":465},{"_key":467},{"_key":492},"CGA-J6Q3-2Q44-HHXX","2026-05-04T18:13:12.340Z","2026-07-22T12:08:41.566Z","Analyzed",{"cisa_kev":497,"cisa_ransomware":497,"cisa_vendor":9,"epss_severity":498,"epss_score":499,"severity":500,"severity_score":501,"severity_version":502,"severity_source":503,"severity_vector":504,"severity_status":495},false,"low",0.00761,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[506,516,524,528,533,537,541,546,552,556,561,565,569,573,577,581,585,589,593,597,601,605,609,613,617,621,625,629,633,637,641,645,649,653],{"url":507,"sources":508,"tags":511},"https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",[503,509,510],"nvd","osv_go",[512,513,514,515],"X Refsource CONFIRM","WEB","Vendor Advisory","Advisory",{"url":517,"sources":518,"tags":519},"https://github.com/prometheus/prometheus/pull/18584",[503,509,510],[520,513,521,522,523],"X Refsource MISC","Issue Tracking","Patch","FIX",{"url":525,"sources":526,"tags":527},"https://github.com/prometheus/prometheus/pull/18585",[503,509,510],[520,513,521,522,523],{"url":529,"sources":530,"tags":531},"https://github.com/prometheus/prometheus/releases/tag/v3.11.3",[503,509,510],[520,513,532],"Release Notes",{"url":534,"sources":535,"tags":536},"https://github.com/prometheus/prometheus/releases/tag/v3.5.3",[503,509,510],[520,513,532],{"url":538,"sources":539,"tags":540},"https://nvd.nist.gov/vuln/detail/CVE-2026-42154",[510],[515],{"url":542,"sources":543,"tags":544},"https://github.com/prometheus/prometheus",[510],[545],"PACKAGE",{"url":547,"sources":548,"tags":549},"https://access.redhat.com/security/cve/CVE-2026-42154",[503],[550,551],"VDB Entry","X Refsource REDHAT",{"url":553,"sources":554,"tags":555},"https://bugzilla.redhat.com/show_bug.cgi?id=2466505",[503],[521,551],{"url":557,"sources":558,"tags":559},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42154.json",[503],[560],"X Sadp Csaf Vex",{"url":562,"sources":563,"tags":564},"https://access.redhat.com/errata/RHSA-2026:30651",[503],[514,551],{"url":566,"sources":567,"tags":568},"https://access.redhat.com/errata/RHSA-2026:25039",[503],[514,551],{"url":570,"sources":571,"tags":572},"https://access.redhat.com/errata/RHSA-2026:29770",[503],[514,551],{"url":574,"sources":575,"tags":576},"https://access.redhat.com/errata/RHSA-2026:25245",[503],[514,551],{"url":578,"sources":579,"tags":580},"https://access.redhat.com/errata/RHSA-2026:34357",[503],[514,551],{"url":582,"sources":583,"tags":584},"https://access.redhat.com/errata/RHSA-2026:34359",[503],[514,551],{"url":586,"sources":587,"tags":588},"https://access.redhat.com/errata/RHSA-2026:34364",[503],[514,551],{"url":590,"sources":591,"tags":592},"https://access.redhat.com/errata/RHSA-2026:36796",[503],[514,551],{"url":594,"sources":595,"tags":596},"https://access.redhat.com/errata/RHSA-2026:36651",[503],[514,551],{"url":598,"sources":599,"tags":600},"https://access.redhat.com/errata/RHSA-2026:34794",[503],[514,551],{"url":602,"sources":603,"tags":604},"https://access.redhat.com/errata/RHSA-2026:41019",[503],[514,551],{"url":606,"sources":607,"tags":608},"https://access.redhat.com/errata/RHSA-2026:41030",[503],[514,551],{"url":610,"sources":611,"tags":612},"https://access.redhat.com/errata/RHSA-2026:40945",[503],[514,551],{"url":614,"sources":615,"tags":616},"https://access.redhat.com/errata/RHSA-2026:40118",[503],[514,551],{"url":618,"sources":619,"tags":620},"https://access.redhat.com/errata/RHSA-2026:41031",[503],[514,551],{"url":622,"sources":623,"tags":624},"https://access.redhat.com/errata/RHSA-2026:41066",[503],[514,551],{"url":626,"sources":627,"tags":628},"https://access.redhat.com/errata/RHSA-2026:40262",[503],[514,551],{"url":630,"sources":631,"tags":632},"https://access.redhat.com/errata/RHSA-2026:40974",[503],[514,551],{"url":634,"sources":635,"tags":636},"https://access.redhat.com/errata/RHSA-2026:40970",[503],[514,551],{"url":638,"sources":639,"tags":640},"https://access.redhat.com/errata/RHSA-2026:40972",[503],[514,551],{"url":642,"sources":643,"tags":644},"https://access.redhat.com/errata/RHSA-2026:40792",[503],[514,551],{"url":646,"sources":647,"tags":648},"https://access.redhat.com/errata/RHSA-2026:42146",[503],[514,551],{"url":650,"sources":651,"tags":652},"https://access.redhat.com/errata/RHSA-2026:42852",[503],[514,551],{"url":654,"sources":655,"tags":656},"https://access.redhat.com/errata/RHSA-2026:42796",[503],[514,551],[],{"date":659,"score":499,"percentile":660},"2026-07-05",0.50853,[662,666,669,672,675,678,682,685,689,692,695,698,701,704,707,710,713,716,719,722,725,728,731,734,737,740,743,746,749,752,754,757,761,764,767,770,773,776,779,782,784,787,791,794,797,800,803,806,809,812,815,818,821,824,827,830,833,837,840,843,846,849],{"date":663,"score":664,"percentile":665},"2026-05-05",0.00021,0.05785,{"date":667,"score":664,"percentile":668},"2026-05-06",0.05795,{"date":670,"score":664,"percentile":671},"2026-05-07",0.05862,{"date":673,"score":664,"percentile":674},"2026-05-08",0.05883,{"date":676,"score":664,"percentile":677},"2026-05-09",0.05927,{"date":679,"score":680,"percentile":681},"2026-05-10",0.00027,0.07795,{"date":683,"score":680,"percentile":684},"2026-05-11",0.07778,{"date":686,"score":687,"percentile":688},"2026-05-12",0.0002,0.05796,{"date":690,"score":687,"percentile":691},"2026-05-13",0.05812,{"date":693,"score":687,"percentile":694},"2026-05-14",0.05801,{"date":696,"score":687,"percentile":697},"2026-05-15",0.05816,{"date":699,"score":687,"percentile":700},"2026-05-16",0.05824,{"date":702,"score":687,"percentile":703},"2026-05-17",0.0582,{"date":705,"score":687,"percentile":706},"2026-05-18",0.0579,{"date":708,"score":687,"percentile":709},"2026-05-19",0.05775,{"date":711,"score":687,"percentile":712},"2026-05-20",0.05742,{"date":714,"score":687,"percentile":715},"2026-05-21",0.05736,{"date":717,"score":687,"percentile":718},"2026-05-22",0.05946,{"date":720,"score":687,"percentile":721},"2026-05-23",0.05937,{"date":723,"score":687,"percentile":724},"2026-05-24",0.05939,{"date":726,"score":687,"percentile":727},"2026-05-25",0.05921,{"date":729,"score":687,"percentile":730},"2026-05-26",0.05901,{"date":732,"score":687,"percentile":733},"2026-05-27",0.05933,{"date":735,"score":687,"percentile":736},"2026-05-28",0.0601,{"date":738,"score":687,"percentile":739},"2026-05-29",0.06023,{"date":741,"score":687,"percentile":742},"2026-05-30",0.06012,{"date":744,"score":687,"percentile":745},"2026-05-31",0.05999,{"date":747,"score":687,"percentile":748},"2026-06-01",0.05949,{"date":750,"score":687,"percentile":751},"2026-06-02",0.05863,{"date":753,"score":687,"percentile":697},"2026-06-03",{"date":755,"score":687,"percentile":756},"2026-06-04",0.05817,{"date":758,"score":759,"percentile":760},"2026-06-05",0.00022,0.0649,{"date":762,"score":759,"percentile":763},"2026-06-06",0.06484,{"date":765,"score":759,"percentile":766},"2026-06-07",0.06473,{"date":768,"score":759,"percentile":769},"2026-06-08",0.06427,{"date":771,"score":759,"percentile":772},"2026-06-09",0.06435,{"date":774,"score":759,"percentile":775},"2026-06-10",0.06467,{"date":777,"score":759,"percentile":778},"2026-06-11",0.06466,{"date":780,"score":759,"percentile":781},"2026-06-12",0.06485,{"date":783,"score":759,"percentile":766},"2026-06-13",{"date":785,"score":759,"percentile":786},"2026-06-14",0.06454,{"date":788,"score":789,"percentile":790},"2026-06-15",0.00559,0.41905,{"date":792,"score":789,"percentile":793},"2026-06-16",0.41954,{"date":795,"score":789,"percentile":796},"2026-06-17",0.42035,{"date":798,"score":789,"percentile":799},"2026-06-18",0.4208,{"date":801,"score":789,"percentile":802},"2026-06-19",0.4207,{"date":804,"score":789,"percentile":805},"2026-06-20",0.42065,{"date":807,"score":789,"percentile":808},"2026-06-21",0.42048,{"date":810,"score":789,"percentile":811},"2026-06-22",0.4204,{"date":813,"score":789,"percentile":814},"2026-06-23",0.42117,{"date":816,"score":789,"percentile":817},"2026-06-24",0.42161,{"date":819,"score":789,"percentile":820},"2026-06-25",0.42243,{"date":822,"score":789,"percentile":823},"2026-06-26",0.42283,{"date":825,"score":789,"percentile":826},"2026-06-27",0.42322,{"date":828,"score":789,"percentile":829},"2026-06-28",0.42314,{"date":831,"score":789,"percentile":832},"2026-06-29",0.42318,{"date":834,"score":835,"percentile":836},"2026-06-30",0.00733,0.49742,{"date":838,"score":835,"percentile":839},"2026-07-01",0.49829,{"date":841,"score":835,"percentile":842},"2026-07-02",0.49864,{"date":844,"score":499,"percentile":845},"2026-07-03",0.50819,{"date":847,"score":499,"percentile":848},"2026-07-04",0.50843,{"date":659,"score":499,"percentile":660},[851,856,858],{"source":503,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":852,"cvss_v4_0":9},{"baseScore":501,"baseSeverity":853,"vectorString":504,"impactScore":854,"exploitabilityScore":855},"HIGH",6,10,{"source":509,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":857,"cvss_v4_0":9},{"baseScore":501,"baseSeverity":853,"vectorString":504,"impactScore":854,"exploitabilityScore":855},{"source":510,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":859,"cvss_v4_0":9},{"baseScore":501,"baseSeverity":9,"vectorString":504,"impactScore":854,"exploitabilityScore":855},[861,887,893],{"ecosystem":862,"name":863,"vendor":864,"product":865,"cpe_part":9,"purl_type":866,"purl_namespace":864,"purl_name":865,"source":9,"versions":867},"Go","github.com/prometheus/prometheus","github.com/prometheus","prometheus","golang",[868,874,878,881,885],{"version":869,"is_range":870,"range_type":871,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":873,"fixed_in":9},"lt0_311_3",true,"semver","0.311.3","excluding",{"version":875,"is_range":870,"range_type":871,"version_start":876,"version_start_type":877,"version_end":872,"version_end_type":873,"fixed_in":9},"gte0_306_0_lt0_311_3","0.306.0","including",{"version":879,"is_range":870,"range_type":871,"version_start":9,"version_start_type":9,"version_end":880,"version_end_type":873,"fixed_in":9},"lt0_305_2","0.305.2",{"version":882,"is_range":870,"range_type":871,"version_start":883,"version_start_type":877,"version_end":884,"version_end_type":877,"fixed_in":9},"gte1_0_0_rc_0_lte2_5_0","1.0.0-rc.0","2.5.0",{"version":886,"is_range":870,"range_type":871,"version_start":883,"version_start_type":877,"version_end":872,"version_end_type":873,"fixed_in":9},"gte1_0_0_rc_0_lt0_311_3",{"ecosystem":862,"name":888,"vendor":863,"product":889,"cpe_part":9,"purl_type":866,"purl_namespace":863,"purl_name":889,"source":9,"versions":890},"github.com/prometheus/prometheus/v2","v2",[891],{"version":892,"is_range":870,"range_type":871,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":9,"name":865,"vendor":865,"product":865,"cpe_part":894,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":895},"a",[896,900],{"version":897,"is_range":870,"range_type":898,"version_start":9,"version_start_type":9,"version_end":899,"version_end_type":873,"fixed_in":9},"\u003C 3.5.3","cpe","3.5.3",{"version":901,"is_range":870,"range_type":898,"version_start":902,"version_start_type":877,"version_end":903,"version_end_type":873,"fixed_in":9},">= 3.6.0, \u003C 3.11.3","3.6.0","3.11.3"]