Issues · prometheus/client_java · GitHub

Dependency Dashboard
#1378 · renovate opened on May 26, 2025

Labels Milestones

# Security Report: Unbounded Observation Buffer Growth During Stalled Scrape in prometheus/client_java

#2287

· manqingzhou opened

on Jul 8, 2026

# Security Report: Sensitive Configuration Values Leaked via PrometheusPropertiesException to HTTP Clients

#2286

· manqingzhou opened

on Jul 8, 2026

# Security Report: Denial of Service via Unbounded `name[]` Query Parameter Flooding in prometheus/client_java

#2285

· manqingzhou opened

on Jul 8, 2026

# Security Report: Thread Pool Exhaustion via Slow Clients (Slowloris-style DoS) in prometheus/client_java HTTPServer

#2284

· manqingzhou opened

on Jul 8, 2026

Security Report: Full Stack Trace Disclosure in HTTP Error Responses

#2283

· manqingzhou opened

on Jul 8, 2026

Security Report: Deterministic ArrayIndexOutOfBoundsException via Math.abs(Integer.MIN_VALUE) in prometheus/client_java Buffer Thread Striping

#2282

· manqingzhou opened

on Jul 8, 2026

Switch Micrometer compatibility workflow to upstream once typed-descriptor path becomes default

#2182

· zeitlinger opened

on Jun 3, 2026

Improve Summary quantiles with DataSketches

#2084

· DCjanus opened

on May 1, 2026

Extra allocations in `*TextFormatWriter` because of Java 8 target

#2075

· m-burst opened

on Apr 29, 2026

Classic-only histogram: consider synchronized block instead of multi-LongAdder for observe() hot path

#1915

· zeitlinger opened

on Feb 25, 2026

Remove separate-pull-requests workaround after upstream release-please fix

#1903

· zeitlinger opened

on Feb 20, 2026

Code Quality Improvement Plan

#1882

· zeitlinger opened

on Feb 16, 2026