Prometheus 3.5.2

Release · · Official release notes ↗

← All Prometheus releases · Searchable index of all 403 changes

Changelog

PR / issue Type Description
#18507 Security UI: Fix stored XSS via unescaped metric names and labels. CVE-2026-40179.
#17908 Performance Regex: Stop calling Simplify.

Reproduced from the official Prometheus 3.5.2 release notes. Last checked 7 Jul 2026, 21:23 UTC.