CLEANSTART-2026-TB80702: Security fix for GHSA-fpmh-frq8-7rj8 applied in: prometheus-operator 0.94.2-r1
Published Nov 12, 2026
·Updated
Security vulnerability affects the prometheus-operator package. This issue is resolved in later releases. See references for vulnerability details.
Affected Software
1 affected componentFixes available
cleanstart/prometheus-operator<0.94.2-r1
0.94.2-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/prometheus-operatorto a version that resolves this vulnerability.Fixed in 0.94.2-r1 - Upgrade
Upgrade
prometheus-operatorto a version that resolves this vulnerability.Fixed in 0.94.2-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which package release contains the security fix?
The fix is applied in prometheus-operator 0.94.2-r1. The issue is resolved in later releases as well.
2
Is this vulnerability remotely exploitable without authentication or user interaction?
The supplied severity vector indicates network attack access, low attack complexity, no required privileges, and no user interaction. The available impact is limited to availability.