Skip to content
OpenAdvisories

Package · Go

github.com/grafana/pyroscope

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2025-41118

    Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection

    Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent COS as the storage backend, an attacker could extract the sec…

    Grafana Pyroscope github.com/grafana/pyroscope Go