Packages

@opentelemetry/exporter-prometheus

0.300.0 · 20 Oct 2026Apache-2.012.1M / weekRepositoryHomepagenpmAtom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Is your project affected?

Paste your package.json, or type the range you declare for @opentelemetry/exporter-prometheus. It is read in your browser and sent nowhere.

LineNewestWhere it stands
0.300.0No known advisory
0.223.0No known advisory
0.222.0No known advisory
0.221.0No known advisory
0.220.0No known advisory
0.219.0No known advisory
0.218.0No known advisory
0.217.0No known advisory
0.216.01 open advisory, worst high
0.215.01 open advisory, worst high
0.214.01 open advisory, worst high
0.213.01 open advisory, worst high
0.212.01 open advisory, worst high
0.211.01 open advisory, worst high
0.210.01 open advisory, worst high
0.209.01 open advisory, worst high
0.208.01 open advisory, worst high
0.207.063 open advisories, worst high · last release Oct 2025, no longer updated
  • High
    Prometheus exporter process crash via malformed HTTP requestGHSA-q7rr-3cgh-j5r3 · 11 May 2026
    • 0.216.x0.216.0No fix on 0.216.x
    • 0.215.x0.215.0No fix on 0.215.x
    • 0.214.x0.214.0No fix on 0.214.x
    • 0.213.x0.213.0No fix on 0.213.x
    • 0.212.x0.212.0No fix on 0.212.x
    • 0.211.x0.211.0No fix on 0.211.x
    • 0.210.x0.210.0No fix on 0.210.x
    • 0.209.x0.209.0No fix on 0.209.x
    • 0.208.x0.208.0No fix on 0.208.x
    • 0.207.x and older0.3.0 – 0.207.0No fix, no longer updated

Quality and security signals

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 24 Oct 2026. Releases and advisories last read 24 Oct 2026.