Lucene search
+L

62 matches found

OSV
OSV
added 2026/04/21 12:2 p.m.21 views

BIT-GRAFANA-PYROSCOPE-2025-41118 Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection

Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...

9.1CVSS5.8AI score0.00407EPSS
SaveExploits0References6
Rows per page
Query Builder