Affected by GO-2026-5381 and 2 other vulnerabilities

GO-2026-5381: Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display in github.com/prometheus/prometheus

GO-2026-5662: Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus

GO-2026-5710: Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus

The highest tagged major version is v2.

netconnlimit

package

v0.305.5 Latest Latest Go to latest Published: Jul 8, 2026 License: Apache-2.0 Imports: 2 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/prometheus/prometheus

Links

Documentation ¶

Overview ¶

Package netconnlimit provides network utility functions for limiting simultaneous connections across multiple listeners.

Index ¶

func NewSharedSemaphore(n int) chan struct{}
func SharedLimitListener(l net.Listener, sem chan struct{}) net.Listener

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func NewSharedSemaphore ¶

func NewSharedSemaphore(n int) chan struct{}

NewSharedSemaphore creates and returns a new semaphore channel that can be used to limit the number of simultaneous connections across multiple listeners.

func SharedLimitListener ¶

func SharedLimitListener(l net.Listener, sem chan struct{}) net.Listener

SharedLimitListener returns a listener that accepts at most n simultaneous connections across multiple listeners using the provided shared semaphore.

Types ¶

This section is empty.

Source Files ¶

View all Source files

netconnlimit.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL