Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Grafana Component: Loki Clear all filters
TI-2026-17499 CVE-2026-21726 · GHSA-497x-rrr9-68jp

Loki Path Traversal - CVE-2021-36156 Bypass

Priority LOW 24

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace} Tha…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00409 Published 2026-04-15 Partial fix · 3.5.9, 3.6.4 CWE-22