CVE record · 1 source
CVE-2026-107840
CVSS 7.5yopass is a service for securely sharing secrets, passwords, and files.
- Vendor
- Prometheus
- Product
- Prometheus / Alertmanager
- CVSS
- 7.5
- Exposure class
- Network management
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
yopass is a service for securely sharing secrets, passwords, and files.
yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label…