Skip to content
OpenAdvisories

Vendor

alerta

2 known vulnerabilities.

Products

alerta 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-34400

    alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API

    Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings.…

    alerta alerta alerta-server PyPI