Threats affecting pkg:github/prometheus

Prometheus versions up to 3.15.1 have a vulnerability where attackers can capture Azure AD or Google IAM bearer tokens by redirecting remote_write requests. This occurs because the system insufficiently protects credentials, allowing attackers controlling the remote-write endpoint or a redirecting server to issue a 3xx redirect and replay the token to their own host.