Is Prometheus 3.11.2 affected?
Apr 13, 2026 · Release notes ↗
2 known vulnerabilities affect 3.11.2 (highest CVSS 7.5).
Your branch 3.11 has reached end of life (May 14, 2026).
11 newer releases in its track, up to 3.15.1. What changed up to 3.15.1
Vulnerabilities affecting 3.11.2
- 7.5 CVE-2026-42151 Prometheus Azure AD remote write OAuth client secret exposed via config API fixed in 3.11.3
- 7.5 CVE-2026-42154 Remote read endpoint allows denial of service via crafted snappy payload fixed in 3.11.3
Newer releases
| 3.15.1 | Oct 21, 2026 | 3.11.2 → 3.15.1 |
| 3.15.0 | Sep 25, 2026 | 3.11.2 → 3.15.0 |
| 3.14.0 | Aug 18, 2026 | 3.11.2 → 3.14.0 |
| 3.13.5 | Oct 21, 2026 | 3.11.2 → 3.13.5 |
| 3.13.4 | Oct 2, 2026 | 3.11.2 → 3.13.4 |
| 3.13.3 | Sep 7, 2026 | 3.11.2 → 3.13.3 |
| 3.13.2 | Jul 30, 2026 | 3.11.2 → 3.13.2 |
| 3.13.1 | Jul 10, 2026 | 3.11.2 → 3.13.1 |
| 3.13.0 | Jul 1, 2026 | 3.11.2 → 3.13.0 |
| 3.12.0 | May 28, 2026 | 3.11.2 → 3.12.0 |
| 3.11.3 | Apr 27, 2026 | 3.11.2 → 3.11.3 |