Vulnerabilities

TI-2026-28348 CVE-2026-39361

OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_url

HIGH 67

OpenObserve is a cloud-native observability platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0027 Published 2026-04-07 No fix listed CWE-918

TI-2024-27853 CVE-2024-41809

LOW 38

OpenObserve is an open-source observability platform.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00359 Published 2024-07-25 Fixed in 0.10.0 CWE-79

TI-2024-27852 CVE-2024-41808

HIGH 73

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00528 Published 2024-07-25 No fix listed CWE-79

TI-2024-16347 CVE-2024-24830

HIGH 76

OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00716 Published 2024-02-08 Fixed in 0.8.0 CWE-269

TI-2024-16561 CVE-2024-25106

MEDIUM 40

OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00486 Published 2024-02-08 Fixed in 0.8.0 CWE-269