CVE-2022-21698

CVE-2022-21698 is a Denial of Service vulnerability affecting client_golang, the Prometheus instrumentation library for Go applications, specifically impacting the promhttp package. It allows for unbounded cardinality and potential memory exhaustion when handling requests with non-standard HTTP methods, affecting instrumented software using specific promhttp.InstrumentHandler* middleware without proper filtering. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and high availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.