Go/github.com/perses/perses CVE-2026-63458: unknown, EPSS 0.30%
Perses's project query parameter authorization bypass exposes cross-project resources in github.com/perses/perses
Action: Upgrade github.com/perses/perses to 0.54.0-beta.3 or later.
go get github.com/perses/perses@v0.54.0-beta.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.0-beta.3 | - |
Fixed versions
| 0.54.0-beta.3 |
Sources
- osv: GO-2026-6518
- https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w
- https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540
- https://github.com/perses/perses/releases/tag/v0.54.0-beta.3
CVE-2026-63458 · published · modified · JSON