MEDIUM5.4Go
GHSA-v86x-5fm3-5p7j· BIT-alertmanager-2023-40577, CVE-2023-40577Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
Modified: 9/10/2026
package
Go/github.com/prometheus/alertmanager
pkg:go/github.com/prometheus/alertmanager
—Go
GO-2023-2020· BIT-alertmanager-2023-40577, CVE-2023-40577Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager
Modified: 2/4/2026