swifturl github.com/swift-server/swift-prometheus vulnerabilities

Latest swifturl github.com/swift-server/swift-prometheus CVEs

Newest publication first

1. CVE-2024-28867 Swift Prometheus un-sanitized metric name or labels can be used to take over exported metrics

   Published 2024-03-29

   High·CVSS 7.4 EPSS 0.65%

   Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies un-sanitized string values into metric names or labels, an attacker could make use of this and send a ?lang query parameter containing newlin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.