2.40.4 / 2022-11-29

[roidelapluie]

• [SECURITY] Fix basic authentication bypass vulnerability (CVE-2022-46146). GHSA-4v48-4q5m-8vx4

---

This discussion was created from the release 2.40.4 / 2022-11-29.

[yasharne]

Where can I find information about CVE-2022-46146? I didn't find anything by searching on the google or https://nvd.nist.gov/

[roidelapluie]

See https://groups.google.com/g/prometheus-announce/c/qVv_BpMJdnM and https://www.openwall.com/lists/oss-security/2022/11/29/1