The Prometheus Common repository currently uses an outdated version of golang.org/x/net. Version v0.45.0 includes a critical security fix for CVE-2025-47911, which addresses a vulnerability in HTTP/2 stream handling that could lead to denial-of-service or resource exhaustion.
The Prometheus Common repository currently uses an outdated version of golang.org/x/net. Version v0.45.0 includes a critical security fix for CVE-2025-47911, which addresses a vulnerability in HTTP/2 stream handling that could lead to denial-of-service or resource exhaustion.