https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:53:32.822376+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02012 bdu:2026-02012 2026-10-03T22:53:32.952614+00:00 bdu:2026-02012 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa61617 Withdrawn: CLEANSTART-2026-AA61617 — Security fixes in grafana-alloy-fips 1.14.2-r1 2026-10-03T22:53:32.952674+00:00

Withdrawn by the publisher.

Affected: CleanStart: grafana-alloy-fips

Package grafana-alloy-fips version 1.14.2-r1 fixes 3 vulnerabilities: CVE-2026-21726, ghsa-497x-rrr9-68jp, ghsa-3xc5-wrhm-f963

 https://cve.radiocsirt.org/vuln/euvd-2026-360204 EUVD-2026-360204 2026-10-03T22:53:32.952725+00:00 EUVD-2026-360204 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21726 fkie_cve-2026-21726 2026-10-03T22:53:32.952745+00:00

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}

Thanks to Prasanth Sundararajan for reporting this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-497x-rrr9-68jp GHSA-497x-rrr9-68jp — Grafana Loki Path Traversal - CVE-2021-36156 Bypass 2026-10-03T22:53:32.952782+00:00

Affected: Go: github.com/grafana/loki/v3

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}

Thanks to Prasanth Sundararajan for reporting this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0242 WID-SEC-W-2026-0242 — Grafana Loki: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T22:53:32.952817+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana Loki ausnutzen, um Informationen offenzulegen.