3.15.1 / 2026-10-21

{
  "id": "c39a1bff219fd6ca0024396931b2e8e073acd2a3ffd4c471aa223d68f81a6d0b",
  "url": "https://github.com/prometheus/prometheus/releases/tag/v3.15.1",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "3.15.1 / 2026-10-21",
    "summary": "Prometheus 3.15.1 updates container CA certificates and Go dependencies to address security issues.",
    "evidence": "[SECURITY] Container images: Update CA certificates to distrust \"emSign ECC Root CA - G3\" and \"Comodo AAA Services root\" following the compromise of eMudhra intermediate CA private keys. [SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template. [SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2 vulnerabilities (GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617).",
    "products": [
      {
        "name": {
          "value": "prometheus",
          "evidence": "Release notes from prometheus"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.15.1",
            "evidence": "3.15.1 / 2026-10-21"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-prometheus-prometheus",
  "document_id": 22247,
  "published_at": "2026-10-21T16:15:57+00:00"
}