github.com/perses/perses
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Perses's missing authorization in datasource proxy allows cross-scope secret disclosure | github.com/perses/perses | Go | High | Fix reported | |
| Perses's project query parameter authorization bypass exposes cross-project resources | github.com/perses/persesRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-multicluster-observability-addon-rhel9 | GoRed Hat | High | Fix reported | |
| Perses's unvalidated project parameter enables filesystem path traversal | github.com/perses/perses | Go | High | Fix reported |