testrecord

May 28, 2026

Changes in this version

+ var HistCounts = []int

+ var HistDataCases = []HistDataCase

+ var HistSTCases = []HistSTCase

+ func GenCustomBucketHistograms(n int, stCase HistSTCase) []record.RefHistogramSample

+ func GenExpHistograms(n int, stCase HistSTCase) []record.RefHistogramSample

+ func GenFloatHistograms(src []record.RefHistogramSample) []record.RefFloatHistogramSample

+ type HistDataCase struct

+ Gen func(n int, stCase HistSTCase) []record.RefHistogramSample

+ Name string

+ type HistSTCase string

+ const HistConstST

+ const HistNoST

+ const HistPrevTST

+ const HistVariableST

Apr 13, 2026 GO-2026-5264 +2 more

  GO-2026-5264: Prometheus: Remote read endpoint allows denial of service via crafted snappy payload in github.com/prometheus/prometheus

  GO-2026-5381: Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display in github.com/prometheus/prometheus

  GO-2026-5710: Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus

Apr 7, 2026 GO-2026-5264 +3 more

  GO-2026-5264: Prometheus: Remote read endpoint allows denial of service via crafted snappy payload in github.com/prometheus/prometheus

  GO-2026-5381: Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display in github.com/prometheus/prometheus

  GO-2026-5662: Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus

  GO-2026-5710: Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus

Apr 2, 2026 GO-2026-5264 +3 more

  GO-2026-5264: Prometheus: Remote read endpoint allows denial of service via crafted snappy payload in github.com/prometheus/prometheus

  GO-2026-5381: Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display in github.com/prometheus/prometheus

  GO-2026-5662: Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus

  GO-2026-5710: Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus

Changes in this version

+ func GenTestRefSamplesCase(t testing.TB, c RefSamplesCase) []record.RefSample

+ type RefSamplesCase string

+ const Realistic1000Samples

+ const Realistic1000WithConstSTSamples

+ const Realistic1000WithVariableSTSamples

+ const WorstCase1000

+ const WorstCase1000WithSTSamples