RATATOSKRATATOSK
Sign in

Prometheus

v3.13.2Observability
Jul 30, 2026

Prometheus v3.13.2 is a security patch fixing two CVEs via dependency updates: golang.org/x/text to v0.39.0 and google.golang.org/grpc to v1.82.1. The release also fixes SIGBUS crashes that occurred when the active query tracker file's disk ran full.

  • securityCVE-2026-56852 fixed in golang.org/x/text

    golang.org/x/text upgraded to v0.39.0 fixes CVE-2026-56852.

  • securityGHSA-hrxh-6v49-42gf fixed in google.golang.org/grpc

    google.golang.org/grpc upgraded to v1.82.1 fixes GHSA-hrxh-6v49-42gf.

Key changes (2)

  • Security: CVE-2026-56852 (golang.org/x/text) and GHSA-hrxh-6v49-42gf (google.golang.org/grpc) fixed
  • Active query tracker file now preallocated to prevent SIGBUS crashes when disk is full
Add Prometheus to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Source ↗All Prometheus releases →