Skip to content
OpenAdvisories

Package · Go

github.com/grafana/loki/v3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2026-21726

    Loki Path Traversal - CVE-2021-36156 Bypass

    The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace} Thanks to Prasanth Sundararajan for report…

    Grafana Loki github.com/grafana/loki github.com/grafana/loki/v3 Go