Vulnerability GO-2026-6528
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 hours ago
September 28, 2026 at 04:43 PM UTC
Perses's unvalidated project parameter enables filesystem path traversal in github.com/perses/perses
v0.2.0 - v0.54.0-beta.3
v0.2.0 - v0.54.0-beta.3
Summary
Perses's unvalidated project parameter enables filesystem path traversal in github.com/perses/perses
Details
Perses's unvalidated project parameter enables filesystem path traversal in github.com/perses/perses
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 hours ago
Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses
v0.43.0 - v0.54.0-beta.3 GO-2026-6514
v0.43.0 - v0.54.0-beta.3 GO-2026-6514
Unknown
3 hours ago
Perses's project query parameter authorization bypass exposes cross-project resources in github.com/perses/perses
v0.2.0 - v0.54.0-beta.2 GO-2026-6518
v0.2.0 - v0.54.0-beta.2 GO-2026-6518
High Risk
10 days ago
Perses's unvalidated project parameter enables filesystem path traversal
v0.2.0 - v0.54.0-beta.3 GHSA-vr5f-w35q-98jp
v0.2.0 - v0.54.0-beta.3 GHSA-vr5f-w35q-98jp
High Risk
10 days ago
Perses's missing authorization in datasource proxy allows cross-scope secret disclosure
v0.43.0 - v0.54.0-beta.3 GHSA-4227-9989-jrhx
v0.43.0 - v0.54.0-beta.3 GHSA-4227-9989-jrhx
High Risk
10 days ago
Perses's project query parameter authorization bypass exposes cross-project resources
v0.2.0 - v0.54.0-beta.2 GHSA-cjgj-2fwf-4c2w
v0.2.0 - v0.54.0-beta.2 GHSA-cjgj-2fwf-4c2w
Impacted packages
Timeline
Published
3 hours ago
September 28, 2026 at 04:43 PM UTC
Last Modified
2 hours ago
September 28, 2026 at 05:00 PM UTC