Skip to content
OpenAdvisories

Package · Go

github.com/perses/perses

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-63445

    Perses: Unvalidated project parameter enables filesystem path traversal

    Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validati…

    perses perses github.com/perses/perses Go
  • High 8.3
    CVE-2026-63199

    Perses: Missing authorization in datasource proxy allows cross-scope secret disclosure

    Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require re…

    perses perses github.com/perses/perses Go
  • High 7.1
    CVE-2026-63458

    Perses project query parameter authorization bypass exposes cross-project resources

    Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoint…

    perses perses github.com/perses/perses Go