A vulnerability was found in Prometheus up to 3.5.1/3.11.1 and classified as problematic. This vulnerability affects the function
label_replace. Executing a manipulation of the argument label can lead to cross site scripting.
The identification of this vulnerability is CVE-2026-40179. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
