Threats affecting pkg:github/prometheus/prometheus

Prometheus versions up to 3.15.1 have a credential leak vulnerability that enables attackers to capture Azure AD or Google IAM bearer tokens. This occurs when remote_write requests are redirected to a malicious host, allowing token replay and unauthorized metric writes to the victim's backend.