My question is, when will the next release of  pushgateway?
https://coderelease.io/github/repository/prometheus/pushgateway  

The need is to address security concern jquery < 3.5.0 (pushgateway v1.2.0 
release has jquery-3.4.1) CSS vuln.

*This change has already been merged into master (updated to jquery-3.5.1)*
https://github.com/prometheus/pushgateway/commit/3056a39317756d7225dbb1c88765e83091915211
 


Details of security concern:

https://www.tenable.com/plugins/nessus/136929 

  According to the self-reported version in the script, the version of 
JQuery hosted on the remote web server is greater than or equal to 1.2 and 
prior to 3.5.0. It is, therefore, affected by multiple cross site scripting 
vulnerabilities.  

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/350f8552-fba3-41bd-be1d-976b89b15ca5n%40googlegroups.com.

Reply via email to