Grafana Loki 安全漏洞

Grafana Loki is an open-source log aggregation system developed by Grafana. There is a security vulnerability in Grafana Loki, which stems from insufficient validation of path traversal sequences. This vulnerability could allow attackers to read Ruler API endpoint files through double-encryption...

CLEANSTART-2026-CG86499 Security fixes for CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.6.5-r0

Multiple security vulnerabilities affect the fluent-bit-plugin-loki package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: jfrog-cli, grafana-fips, chainloop-control-plane-fips, minio, nfpm, lazygit, grafana-alloy-fips, nuclei, teleport, minio-fips, cri-tools, terraform-mcp-server, goreleaser, rclone-fips, witness, opentelemetry-collector-contrib, grafana, datadog-agent-fips, malcontent,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: terragrunt, malcontent, minio, ollama, rclone, tempo, prometheus, kubevela, dagger, datadog-agent, maru, terraform-mcp-server, goreleaser, mcp-grafana, k8sgpt, loki, nuclei, nfpm, weaviate, gitlab-runner, witness, k3s, teleport, redpanda, lazygit,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: envoy-gateway, minio, nri-mysql-fips, seaweedfs-fips, grafana-alloy-fips, aactl, temporal-server, percona-xtradb-cluster-operator, sops, seaweedfs, rekor, crossplane-provider-sql, caddy-fips, trillian, gitea-fips, flux-kustomize-controller-fips,...

The vulnerability of the system’s application programming interface for aggregating and storing Loki logs allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the system’s application programming interface for aggregating and storing Loki logs is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: cerbos, terragrunt, minio, dex, trillian, kine, step-ca, timestamp-authority, argo-workflows, fulcio, openfga, croc, chezmoi, gitea, step-kms-plugin, loki, nuclei, spicedb, aactl, dbmate, hydra, step-issuer, amass, age, openbao, kyverno-policy-reporter, grafana-alloy...

SUSE-SU-2026:0327-1 Security update for alloy

This update for alloy fixes the following issues: Update to 1.12.2: Security fixes: - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion bsc1255333: - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/opencontainers/runc: Fixed container...

Grafana Loki Path Traversal - CVE-2021-36156 Bypass

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/namespace Thanks to Prasanth Sundararajan for reporting this vulnerability...

PT-2026-21013

Name of the Vulnerable Software and Affected Versions Loki affected versions not specified Description An issue in the log aggregation and storage system exists due to improper restriction of the directory path name. By using double encoding to bypass validation of the namespace parameter for pat...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, aws-ebs-csi-driver-fips, knative-operator, kustomize-fips, opencost-fips, cloud-provider-azure-fips, go-fips, gitaly-fips, tflint-fips, vendir-fips, grpcurl-fips, jupyterhub-k8s-image-awaiter-fips, teleport, kserve-modelmesh-serving, kor,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, aws-ebs-csi-driver-fips, knative-operator, kustomize-fips, opencost-fips, cloud-provider-azure-fips, go-fips, gitaly-fips, tflint-fips, vendir-fips, grpcurl-fips, jupyterhub-k8s-image-awaiter-fips, teleport, kserve-modelmesh-serving, kor,...

EUVD-2005-1945

Malware in sbrugna...

EUVD-2021-2065

Malware in sbrugna...

MAL-2025-7051 Malicious code in @amber-team/create-loki-report (npm)

The package @amber-team/create-loki-report was found to contain malicious code...

Malicious code in @amber-team/create-loki-report (npm)

The package @amber-team/create-loki-report was found to contain malicious code...

Malicious code in loki-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75940c2d0ed836d2725549e9704eaefe1d989aa5349c7b27fdf2556be16e32a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5935 Malicious code in loki-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75940c2d0ed836d2725549e9704eaefe1d989aa5349c7b27fdf2556be16e32a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: thanos-operator, http-echo, helm-push, kwok, grype, kubernetes-csi-external-provisioner, shfmt, velero, hubble-ui, nri-rabbitmq, newrelic-infra-operator, pulumi-language-java, docker-cli, php-fpmexporter, esbuild, logstash-exporter, hey, gomplate,...

Loki: a new private agent for the popular Mythic framework

In July 2024, we discovered the previously unknown Loki backdoor, which was used in a series of targeted attacks. By analyzing the malicious file and open sources, we determined that Loki is a private version of an agent for the open-source Mythic framework. One of the agent's decrypted strings O...