monitoring vulnerabilities

2 known vulnerabilities in monitoring from Ctfer-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  monitoring: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-32771Mar 20, 2026Ctfer-io

  The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). In versions prior to 0.2.2, the sanitizeArchivePath function in pkg/extract/extract.go (lines 248–254) is vuln

• 7.1 High severity

  monitoring: Improper Access Control

  CVE-2026-32720Mar 16, 2026Ctfer-io

  The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other