VYPR

Swift Prometheus

by Apple Inc.

CVEs (1)

  • CVE-2024-28867MedMar 29, 2024
    risk 0.31cvss 5.9epss 0.01

    Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies _un-sanitized string values into metric names or labels_, an attacker could make use of this and send a `?lang` query parameter containing…