rpm package
opensuse/perses-cli&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/perses-cli&distro=openSUSE%20Tumbleweed
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-63458 | Hig | — | < 0.54.0-1.1 | 0.54.0-1.1 | Sep 18, 2026 | Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including /api/v1/ | |
| CVE-2026-63445 | Hig | — | < 0.54.0-1.1 | 0.54.0-1.1 | Sep 18, 2026 | Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directo | |
| CVE-2026-63199 | Hig | — | < 0.54.0-1.1 | 0.54.0-1.1 | Sep 18, 2026 | Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require read permission for the |
- affected < 0.54.0-1.1fixed 0.54.0-1.1
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including /api/v1/
- affected < 0.54.0-1.1fixed 0.54.0-1.1
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directo
- affected < 0.54.0-1.1fixed 0.54.0-1.1
Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require read permission for the