Known vulnerabilities in Loki
Vendor:
Grafana Labs
Software:
Loki
Software CPE:
cpe:2.3:a:grafana_labs:loki:*:*:*:*:*:*:*:*
Website:
https://github.com/grafana
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
3.7.6
3.6.15
3.7.5
3.6.14
3.6.13
3.7.4
3.7.3
3.6.12
3.7.2
3.6.11
3.6.10
3.6.9
3.7.1
3.7.0
3.6.8
3.5.12
3.6.7
3.5.11
3.6.6
3.5.10
3.6.5
3.6.4
3.6.3
3.5.9
3.6.2
3.6.1
3.6.0
2.9.17
2.9.16
3.5.8
3.5.7
3.5.6
3.5.5
3.4.6
3.5.4
3.5.3
3.4.5
3.5.2
3.4.4
2.9.15
3.5.1
3.5.0
2.9.14
3.4.3
3.3.4
2.9.13
3.4.2
3.3.3
2.9.12
3.4.1
3.4.0
3.3.2
3.2.2
2.9.11
3.3.1
3.3.0
3.1.2
3.2.1
3.2.0
3.0.1
2.9.10
3.1.1
2.9.9
3.1.0
2.9.8
2.9.7
3.0.0
2.8.11
2.9.6
2.9.5
2.8.10
2.8.9
2.9.4
2.8.8
2.8.7
2.9.3
2.8.6
2.9.2
2.9.1
2.8.5
2.9.0
2.8.4
2.7.7
2.7.6
2.8.3
2.8.2
2.8.1
2.8.0
2.7.5
2.7.4
2.7.2
2.7.3
2.6.1
2.6.0
2.5.0
2.4.2
2.4.1
2.4.0
2.3.0
2.2.1
2.2.0
2.1.0
2.0.1
2.0.0
1.6.1
1.6.0
1.5.0
1.4.1
1.4.0
1.3.0
1.2.0
1.1.0
1.0.2
1.0.1
1.0.0
0.4.0
0.3.0
0.2.0
0.1.0
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139270 - Uncontrolled Memory Allocation CVE-2026-21729 |
CWE-789 | Medium | 3.7.0 | 16.07.2026 |
SB2026072433 |
||
| #VU122161 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-21726 |
CWE-22 | Medium | 3.6.4 | 30.01.2026 |
SB2026013060 |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 2.9.2 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 2.9.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU80391 - Out-of-bounds write CVE-2022-48174 |
CWE-787 | Medium | 2.8.5, 2.9.1 | 04.09.2023 |
SB2023090428 SB2023090430 SB2023090537 and 16 more |
||
| #VU64412 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-36156 |
CWE-22 | Medium | 2.3.0 | 15.06.2022 |
SB2021091458 SB2021081056 |