https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T01:55:39.743728+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-29328 EUVD-2026-29328 2026-10-28T01:55:39.746435+00:00 EUVD-2026-29328 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36156 fkie_cve-2021-36156 2026-10-28T01:55:39.746512+00:00

An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Loki will attempt to parse a rules file at that location and include some of the contents in the error message.

 https://cve.radiocsirt.org/vuln/ghsa-grj5-8x6q-hc9q GHSA-grj5-8x6q-hc9q — Path traversal in Grafana Loki 2026-10-28T01:55:39.746555+00:00

Affected: Go: github.com/grafana/loki

An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Loki will attempt to parse a rules file at that location and include some of the contents in the error message.

 https://cve.radiocsirt.org/vuln/gsd-2021-36156 gsd-2021-36156 2026-10-28T01:55:39.746614+00:00 gsd-2021-36156