DIsable the 9090/status Page Prometheus API

Our Security VUlnerability scanner has reported , During the security tests, it was possible to collect Prometheus configuration information, the current version of Prometheus and the GoLang build version via an unauthenticated API.

And it was suggested
Prometheus should be updated to include latest security patches. The configuration and system information should be deactivated, or if needed, secured with a login.

How can i disable the page so that the information wont get displayed