https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T16:28:35.412501+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-40577 CVE-2023-40577 — Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 2026-10-02T16:28:35.414034+00:00

Affected: prometheus alertmanager

Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.