https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:20:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02012 bdu:2026-02012 https://cve.radiocsirt.org/vuln/bdu:2026-02012 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa61617 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana-alloy-fips</p> <p>Package grafana-alloy-fips version 1.14.2-r1 fixes 3 vulnerabilities: CVE-2026-21726, ghsa-497x-rrr9-68jp, ghsa-3xc5-wrhm-f963</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana-alloy-fips</p> <p>Package grafana-alloy-fips version 1.14.2-r1 fixes 3 vulnerabilities: CVE-2026-21726, ghsa-497x-rrr9-68jp, ghsa-3xc5-wrhm-f963</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aa61617 https://cve.radiocsirt.org/vuln/euvd-2026-360204 EUVD-2026-360204 https://cve.radiocsirt.org/vuln/euvd-2026-360204 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21726 <p>The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}</p> <p>Thanks to Prasanth Sundararajan for reporting this vulnerability.</p> <p>The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}</p> <p>Thanks to Prasanth Sundararajan for reporting this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-21726 https://cve.radiocsirt.org/vuln/ghsa-497x-rrr9-68jp <p><strong>Affected:</strong> Go: github.com/grafana/loki/v3</p> <p>The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}</p> <p>Thanks to Prasanth Sundararajan for reporting this vulnerability.</p> <p><strong>Affected:</strong> Go: github.com/grafana/loki/v3</p> <p>The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}</p> <p>Thanks to Prasanth Sundararajan for reporting this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-497x-rrr9-68jp https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0242 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana Loki ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana Loki ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0242