{"schemaVersion":3,"id":"CVE-2026-21726","aliases":["CGA-2hpg-3v2w-xp83","CGA-c8pf-r69r-5h46","CGA-gq42-q538-2fg8","CGA-m3c6-6gwp-42h8","CGA-p7hj-v3jh-pp9f","CGA-rvj4-r26v-mm9q","CGA-wgrp-xf9q-2pf6","CGA-x2m5-7h25-5xqw","GHSA-497x-rrr9-68jp","GO-2026-5115","CGA-2444-j48h-2839","CGA-27p2-f9jc-2687","CGA-29fg-gq43-59xp","CGA-29mh-3ph4-pr3f","CGA-2fjc-4cjr-x736","CGA-34cp-6jm8-xvhg","CGA-3mhw-wqmg-rr92","CGA-3mpr-vqwm-pwfw","CGA-3rjr-cwhh-cq89","CGA-44ph-954h-9p8m","CGA-4rmp-ggh8-42v5","CGA-4vhm-77fw-c8xc","CGA-52qm-4p36-8mv6","CGA-5934-fw6w-7g5x","CGA-59w8-g459-m26v","CGA-5c68-x8gp-ww5x","CGA-5vv7-r5r6-wq6v","CGA-5vwx-r7fq-9cfr","CGA-6864-cr3g-qf56","CGA-6r46-g78j-j4j3","CGA-7fg2-xc2r-xgxf","CGA-7m74-7xh3-gwr9","CGA-834p-6vpc-qqhv","CGA-87qp-7rjv-hq8p","CGA-8f4p-mxh3-wg3c","CGA-8fr8-wr5r-rf44","CGA-8j8q-2vmv-mh5f","CGA-9hhf-2v3m-xphv","CGA-9jxm-q42g-f3j2","CGA-9wf6-7jm7-88ph","CGA-c2c5-9w9m-g29f","CGA-c63j-r75w-49hw","CGA-cph8-8633-59vh","CGA-cpw3-jv88-w797","CGA-cxqq-vvx5-8c8c","CGA-f2rc-4pj8-gwhw","CGA-f4rf-p698-gp98","CGA-fjfj-67c4-wxr3","CGA-fprg-fjf5-phhx","CGA-fqg6-23g2-68v7","CGA-g7x8-mf5v-crpc","CGA-h437-gc5r-vg46","CGA-h75g-gwp5-8p49","CGA-hc48-3mjv-mw4h","CGA-hjhp-h38c-x9q9","CGA-j7h6-xmwj-68j2","CGA-j873-xqm4-m48h","CGA-jf45-8hcx-9834","CGA-jp23-p2qr-cm5q","CGA-m2v8-r7m5-gvgr","CGA-m78r-qgxr-c482","CGA-p22r-qc24-2hqf","CGA-p5m3-3vgf-2gf8","CGA-ph57-7qw7-87q8","CGA-ph83-hrp5-9qxj","CGA-prhf-2j8q-ff7f","CGA-pvpm-j56r-qm7r","CGA-qfwg-w753-jw79","CGA-qg63-rcpr-792f","CGA-qgh3-7wqv-qrc2","CGA-r373-227q-48cq","CGA-rxcq-86w2-q892","CGA-v78x-f72c-44r2","CGA-w3w6-6prh-25rq","CGA-w45p-xvp5-jw3x","CGA-wfcg-4457-7vcg","CGA-whjx-f762-67gw","CGA-wjjr-c88j-78rh","CGA-wmmg-54xf-jmvp","CGA-x6m6-m4g4-fghw"],"status":"published","duplicateOf":null,"title":null,"description":"The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace}\n\nThanks to Prasanth Sundararajan for reporting this vulnerability.","dates":{"published":"2026-04-15T19:24:31.268Z","modified":"2026-08-27T17:22:30.899Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00409,"percentile":0.33803,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00409},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00409,"percentile":0.33803}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00409,"percentile":0.33803}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"chainguard","product":"commercial-grafana-11.6","name":"commercial-grafana-11.6","label":"commercial-grafana-11.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-grafana-11.6","purlType":"apk","versions":[{"text":"< 11.6.16-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.6.16-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-grafana-12.1","name":"commercial-grafana-12.1","label":"commercial-grafana-12.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-grafana-12.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-grafana-12.2","name":"commercial-grafana-12.2","label":"commercial-grafana-12.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-grafana-12.2","purlType":"apk","versions":[{"text":"< 12.2.10-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.10-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-grafana-12.3","name":"commercial-grafana-12.3","label":"commercial-grafana-12.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-grafana-12.3","purlType":"apk","versions":[{"text":"< 12.3.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.3.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-grafana-12.4","name":"commercial-grafana-12.4","label":"commercial-grafana-12.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-grafana-12.4","purlType":"apk","versions":[{"text":"< 12.4.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.4.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-11.5","name":"grafana-11.5","label":"grafana-11.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-11.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-11.6","name":"grafana-11.6","label":"grafana-11.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-11.6","purlType":"apk","versions":[{"text":"< 11.6.15-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.6.15-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-12.0","name":"grafana-12.0","label":"grafana-12.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-12.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-12.1","name":"grafana-12.1","label":"grafana-12.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-12.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-12.2","name":"grafana-12.2","label":"grafana-12.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-12.2","purlType":"apk","versions":[{"text":"< 12.2.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-12.3","name":"grafana-12.3","label":"grafana-12.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-12.3","purlType":"apk","versions":[{"text":"< 12.3.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.3.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-12.4","name":"grafana-12.4","label":"grafana-12.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-12.4","purlType":"apk","versions":[{"text":"< 12.4.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.4.4-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-13.0","name":"grafana-13.0","label":"grafana-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-13.0","purlType":"apk","versions":[{"text":"< 13.0.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-alloy","name":"grafana-alloy","label":"grafana-alloy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-alloy","purlType":"apk","versions":[{"text":"< 1.15.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-alloy-fips","name":"grafana-alloy-fips","label":"grafana-alloy-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-alloy-fips","purlType":"apk","versions":[{"text":"< 1.15.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-11.5","name":"grafana-fips-11.5","label":"grafana-fips-11.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-11.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-11.6","name":"grafana-fips-11.6","label":"grafana-fips-11.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-11.6","purlType":"apk","versions":[{"text":"< 11.6.15-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.6.15-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-12.0","name":"grafana-fips-12.0","label":"grafana-fips-12.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-12.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-12.1","name":"grafana-fips-12.1","label":"grafana-fips-12.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-12.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-12.2","name":"grafana-fips-12.2","label":"grafana-fips-12.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-12.2","purlType":"apk","versions":[{"text":"< 12.2.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-12.3","name":"grafana-fips-12.3","label":"grafana-fips-12.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-12.3","purlType":"apk","versions":[{"text":"< 12.3.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.3.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-12.4","name":"grafana-fips-12.4","label":"grafana-fips-12.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-12.4","purlType":"apk","versions":[{"text":"< 12.4.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.4.4-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-fips-13.0","name":"grafana-fips-13.0","label":"grafana-fips-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-fips-13.0","purlType":"apk","versions":[{"text":"< 13.0.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.4","name":"loki-3.4","label":"loki-3.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.4-logcli","name":"loki-3.4-logcli","label":"loki-3.4-logcli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.4-logcli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.4-loki-canary","name":"loki-3.4-loki-canary","label":"loki-3.4-loki-canary","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.4-loki-canary","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.4-promtail","name":"loki-3.4-promtail","label":"loki-3.4-promtail","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.4-promtail","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.5","name":"loki-3.5","label":"loki-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.5-logcli","name":"loki-3.5-logcli","label":"loki-3.5-logcli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.5-logcli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.5-loki-canary","name":"loki-3.5-loki-canary","label":"loki-3.5-loki-canary","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.5-loki-canary","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-3.5-promtail","name":"loki-3.5-promtail","label":"loki-3.5-promtail","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-3.5-promtail","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.4","name":"loki-fips-3.4","label":"loki-fips-3.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.4-logcli","name":"loki-fips-3.4-logcli","label":"loki-fips-3.4-logcli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.4-logcli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.4-loki-canary","name":"loki-fips-3.4-loki-canary","label":"loki-fips-3.4-loki-canary","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.4-loki-canary","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.4-promtail","name":"loki-fips-3.4-promtail","label":"loki-fips-3.4-promtail","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.4-promtail","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.5","name":"loki-fips-3.5","label":"loki-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.5-logcli","name":"loki-fips-3.5-logcli","label":"loki-fips-3.5-logcli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.5-logcli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.5-loki-canary","name":"loki-fips-3.5-loki-canary","label":"loki-fips-3.5-loki-canary","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.5-loki-canary","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"loki-fips-3.5-promtail","name":"loki-fips-3.5-promtail","label":"loki-fips-3.5-promtail","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/loki-fips-3.5-promtail","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-12.3","name":"grafana-12.3","label":"grafana-12.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-12.3","purlType":"apk","versions":[{"text":"< 12.3.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.3.7-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-12.4","name":"grafana-12.4","label":"grafana-12.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-12.4","purlType":"apk","versions":[{"text":"< 12.4.4-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.4.4-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-13.0","name":"grafana-13.0","label":"grafana-13.0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-13.0","purlType":"apk","versions":[{"text":"< 13.0.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.2-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-alloy","name":"grafana-alloy","label":"grafana-alloy","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-alloy","purlType":"apk","versions":[{"text":"< 1.15.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.1-r2","eol":null,"hubHref":null},{"vendor":"github.com/grafana","product":"loki","name":"github.com/grafana/loki","label":"loki","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/grafana/loki","purlType":"golang","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/grafana/loki","product":"v3","name":"github.com/grafana/loki/v3","label":"v3","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/grafana/loki/v3","purlType":"golang","versions":[{"text":"< 3.6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.4","eol":null,"hubHref":null},{"vendor":"grafana","product":"loki","name":"loki","label":"loki","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.3.0, < 3.5.9","noFixRecorded":false,"fixedIn":null},{"text":"< 3.6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.3.0, < 3.5.9 | < 3.6.4","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"grafana-loki","label":"Grafana Loki","category":"server-app"}},"hubHref":"/vendor/grafana/loki"}],"affectedCount":46,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-21726","label":"grafana.com/security/security-advisories/cve-2026-21726","hostname":"grafana.com","tags":["Vendor Advisory","Advisory","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21726.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21726.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21726","label":"nvd.nist.gov/vuln/detail/CVE-2026-21726","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/grafana/loki","label":"github.com/grafana/loki","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-497x-rrr9-68jp","label":"github.com/advisories/GHSA-497x-rrr9-68jp","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21483-1"],"duplicates":[],"related":["CGA-W6Q8-CJ25-57RP","OPENSUSE-SU-2026:21483-1"]},"timeline":[{"kind":"published","date":"2026-04-15T19:24:31.268Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-27T17:22:30.899Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T02:16:42.494Z","stale":false,"partial":false}}