Skip to content
OpenAdvisories

Package · PyPI

alerta-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2026-34400

    alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API

    Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings.…

    alerta alerta alerta-server PyPI
  • Critical 9.1
    CVE-2020-26214 Scanner template EPSS 66%

    LDAP authentication bypass in Alerta

    In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenti…

    alerta alerta alerta-server PyPI