The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade prometheusUpgrade prometheus-node-exporter | Aug 22, 2024 | Nov 29, 2022 |
| Debian | — | Upgrade golang-github-prometheus-exporter-toolkit | Jul 30, 2024 | Nov 29, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade node_exporterUpgrade prometheus | Feb 4, 2023 | Feb 4, 2023 |
| Gentoo Linux | — | Upgrade app-metrics/snmp_exporter. | Jan 15, 2024 | Nov 29, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 29, 2022 |
| Suse | — | Upgrade prometheus-ha_cluster_exporterUpgrade libns1604-32bitUpgrade bind-docUpgrade prometheus-postgres_exporterUpgrade grafanaUpgrade libirs-develUpgrade bindUpgrade firewalld-prometheus-configUpgrade supportutils-plugin-susemanager-clientUpgrade golang-github-prometheus-promuUpgrade libbind9-1600Upgrade libirs1601-32bitUpgrade golang-github-qubitproducts-exporter_exporterUpgrade bind-devel-32bitUpgrade libisccfg1600-32bitUpgrade libdns1605-32bitUpgrade supportutils-plugin-saltUpgrade golang-github-prometheus-alertmanagerUpgrade libisccc1600-32bitUpgrade spacecmdUpgrade libdns1605Upgrade libisccc1600Upgrade dracut-saltbootUpgrade libns1604Upgrade libbind9-1600-32bitUpgrade libisccfg1600Upgrade bind-utilsUpgrade libisc1606-32bitUpgrade golang-github-prometheus-node_exporterUpgrade libirs1601Upgrade golang-github-prometheus-prometheusUpgrade wireUpgrade golang-github-lusitaniae-apache_exporterUpgrade libisc1606Upgrade bind-chrootenvUpgrade bind-develUpgrade python3-bindUpgrade prometheus-blackbox_exporter | Feb 21, 2023 | Nov 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub