https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T01:56:59.947273+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-aa61617 Withdrawn: CLEANSTART-2026-AA61617 — Security fixes in grafana-alloy-fips 1.14.2-r1 2026-10-31T01:57:00.071369+00:00

Withdrawn by the publisher.

Affected: CleanStart: grafana-alloy-fips

Package grafana-alloy-fips version 1.14.2-r1 fixes 3 vulnerabilities: CVE-2026-21726, ghsa-497x-rrr9-68jp, ghsa-3xc5-wrhm-f963

 https://db.gcve.eu/vuln/cve-2026-21726 CVE-2026-21726 — Loki Path Traversal - CVE-2021-36156 Bypass 2026-10-31T01:57:00.071436+00:00

Affected: Grafana Loki

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}

Thanks to Prasanth Sundararajan for reporting this vulnerability.