VYPR

Mimir

by Grafana

CVEs (1)

  • CVE-2026-81938HigNov 2, 2026
    risk 0.50cvss 7.7epss —

    Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: http_headers..files and basic_auth.username_file. A tenant permitted to upload an Alertmanager configuration could…