megachangelog
Security3.5.5

UI: Bump sanitize-html to fix CVE-2026-53606

Updated sanitize-html dependency to v2.17.5 to address a security vulnerability in the UI.

This release is built with Go 1.25.12 and fixes a security issue in a UI dependency.

  • [SECURITY] UI: Bump sanitize-html to v2.17.5 to fix CVE-2026-53606. #19060
securityuidependenciescve

Source: original entry ↗

More from Prometheus

Follow Prometheus to get its new changes in your feed and email digest.

Announcement0.313.4

Release v0.313.4

Version 0.313.4 of Prometheus has been released with bug fixes and improvements.

releaseprometheus
Announcement3.13.4

Prometheus v3.13.4

Release of Prometheus version 3.13.4 with bug fixes and improvements.

prometheusreleasemonitoring
Announcement0.315.0

Release v0.315.0

Version 0.315.0 of Prometheus has been released with updates and improvements.

releaseprometheusmonitoring
See all Prometheus changes →