CVE-2024-58102

CVE-2024-58102 affects Datalust Seq prior to 2024.3.13545. The issue is an insecure default parsing depth limit that allows stack consumption when processing user-supplied queries containing deeply nested expressions. This is the stated root cause and impacts availability (via potential stack exh...

CVE-2025-27912

CVE-2025-27912 affects Datalust Seq prior to 2024.3.13545. The issue is caused by missing Content-Type validation, enabling CSRF when a user authenticated via Entra ID/OpenID Connect, or via username/password/AD, visits a malicious site on the same TLD as the Seq server. Exploitation could allow ...

CVE-2018-8096

CVE-2018-8096 affects Datalust Seq versions before 4.2.605. The vulnerability is an authentication bypass exploitable via a PUT request to api/settings/setting-isauthenticationenabled with "Name":"isauthenticationenabled","Value":false, potentially granting admin access. Multiple connected source...

CVE-2025-27911

CVE-2025-27911 affects Datalust Seq prior to 2024.3.13545. The issue is in the expansion of identifiers in message templates, which can bypass the system’s “Event body limit bytes” setting. This can cause increased resource consumption, and with sufficiently large events may lead to disk space ex...

CVE-2023-38195

Datalust Seq versions prior to 2023.2.9489 are affected. The issue allows insertion of sensitive information into externally accessible files or directories when external metadata storage (SQL Server or PostgreSQL) is used, and exploitation requires a high-privilege user. Remediation: upgrade to ...

CVE-2024-29866

Datalust Seq, a logging server, is vulnerable to Incorrect Access Control (CWE-284) in versions prior to 2023.4.11151 and 2024.1.11146 . This flaw allows a Project Owner or Organization Owner to escalate their permissions to System privileges via a local network attack vector . While no current e...

CVE-2021-41329

CVE-2021-41329 affects Datalust Seq prior to 2021.2.6259. The issue is an information exposure caused by an internal cache key collision: when a user has a view filter with an array/IN clause and another user runs an identical query with different array elements, the results may be visible to the...