The Prometheus security policy, including how to report vulnerabilities, can be found here:
Repository navigation
Security: prometheus/alertmanager
Security
SECURITY.md
-
Alertmanager API v2 allows cross-origin reads, alert creation and silence creationGHSA-w5g2-x24w-p3fq published
Oct 29, 2026 by SoloJacobsHigh -
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpointGHSA-v86x-5fm3-5p7j published
Aug 23, 2023 by simonpasquierHigh
Learn more about advisories related to prometheus/alertmanager in the GitHub Advisory Database