Vulnerability Bulletins |
CVE-2026-33374 |
|
| Affected software | PROMETHEUS |
| The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-33374 | |