Change8

v3.11.2

📦 prometheusView on GitHub →
1 features🐛 2 fixes🔧 2 symbols

Summary

This release patches a critical Stored XSS vulnerability in the Prometheus web UI and introduces a new `health_filter` option for Consul Service Discovery.

✨ New Features

  • Consul SD: Introduce `health_filter` field for Health API filtering.

🐛 Bug Fixes

  • Fix stored XSS vulnerability triggered via unescaped metric names and label values in Prometheus web UI tooltips and metrics explorer (CVE-2026-40179).
  • Consul SD: Fix filter parameter being incorrectly applied to the Health API.

Affected Symbols