swift-prometheus vulnerabilities

1 known vulnerability in swift-prometheus from Swift-server. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  swift-prometheus: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2024-28867Mar 29, 2024Swift-server

  Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies _un-sanitized string values into metric names or labels_, an attacker could make use of this and send a `?lang` query par