Go/github.com/perses/perses CVE-2026-63445: high, EPSS 0.56%
Perses's unvalidated project parameter enables filesystem path traversal
Action: Upgrade github.com/perses/perses to 0.54.0-rc.0 or later.
go get github.com/perses/perses@v0.54.0-rc.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.0-rc.0 | - |
Fixed versions
| 0.54.0-rc.0 |
Sources
- osv: GHSA-vr5f-w35q-98jp
- https://github.com/perses/perses/security/advisories/GHSA-vr5f-w35q-98jp
- https://github.com/perses/perses/commit/75e5471040ccb5674ea8d25c2aa16c80ccb70b2a
- https://github.com/perses/perses
- https://github.com/perses/perses/releases/tag/v0.54.0-rc.0
CVE-2026-63445 · published · modified · JSON