Suggestions search

All statuses

Filter by:

With package: python313Packages.pysigma-backend-loki

Found 2 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-21729

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month, 4 weeks ago Activity log

Created suggestion 1 month, 4 weeks ago

Loki detected_fields query limits results in unbounded memory allocation

Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

References

https://grafana.com/security/security-advisories/cve-2026-21729 vendor-advisory

Affected products

Loki

<v3.7.0

Matching in nixpkgs

pkgs.loki

C++ library of designs, containing flexible implementations of common design patterns and idioms

nixos-unstable -
- nixos-unstable-small 0.1.7
nixos-26.05 -
- nixos-26.05-small 0.1.7

pkgs.loki-tool

Tool for custom firmware on AT&T/Verizon Samsung and LG devices

nixos-unstable -
- nixos-unstable-small 0-unstable-2016-06-27
nixos-26.05 -
- nixos-26.05-small 0-unstable-2016-06-27

pkgs.grafana-loki

Like Prometheus, but for logs

nixos-unstable -
- nixos-unstable-small 3.7.7
nixos-26.05 -
- nixos-26.05-small 3.7.7

pkgs.python313Packages.python-logging-loki

Python logging handler for Loki

nixos-unstable -
- nixos-unstable-small 0.3.1
nixos-26.05 -
- nixos-26.05-small 0.3.1

pkgs.python314Packages.python-logging-loki

Python logging handler for Loki

nixos-unstable -
- nixos-unstable-small 0.3.1
nixos-26.05 -
- nixos-26.05-small 0.3.1

pkgs.grafanaPlugins.grafana-lokiexplore-app

Browse Loki logs without the need for writing complex queries

nixos-unstable -
- nixos-unstable-small 2.5.2
nixos-26.05 -
- nixos-26.05-small 2.0.4

pkgs.python313Packages.pysigma-backend-loki

Library to support the loki backend for pySigma

nixos-unstable -
- nixos-unstable-small 0.13.0
nixos-26.05 -
- nixos-26.05-small 0.13.0

pkgs.python314Packages.pysigma-backend-loki

Library to support the loki backend for pySigma

nixos-unstable -
- nixos-unstable-small 0.13.0
nixos-26.05 -
- nixos-26.05-small 0.13.0

Package maintainers

@ryan4yin Ryan Yin <xiaoyin_c@qq.com>
@globin Robin Gloster <mail@glob.in>
@mmahut Marek Mahut <marek.mahut@gmail.com>
@emilylange Emily Lange <nix@emilylange.de>
@loispostula Loïs Postula <lois@postu.la>
@peterhoeg Peter Hoeg <peter@hoeg.com>
@numinit Morgan Jones <me+nixpkgs@numin.it>
@adrian-gierakowski Adrian Gierakowski <adrian.gierakowski@gmail.com>
@johnrtitor Masum Reza <masumrezarock100@gmail.com>
@RossComputerGuy Tristan Ross <tristan.ross@midstall.com>
@ungeskriptet David Wronek <nix@david-w.eu>
@hadilq Hadi Lashkari Ghouchani <hadilq.dev@gmail.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@Moraxyc Moraxyc Xu <i@qaq.li>

Untriaged

Permalink CVE-2026-21726

5.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 5 months ago by @LeSuisse Activity log

Created suggestion 5 months ago
@LeSuisse ignored
2 packages
- loki-tool
- loki
5 months ago

Loki Path Traversal - CVE-2021-36156 Bypass

The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace} Thanks to Prasanth Sundararajan for reporting this vulnerability.