Perses vulnerabilities
We track 3 vulnerabilities in Perses products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
Latest Perses vulnerabilities
- 7.1 High severity
perses: Authorization Bypass Through User-Controlled Key
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints
- 7.1 High severity
perses: Improper Limitation of a Pathname to a Restricted Directory
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validatin
- 8.3 High severity
perses: Missing Authorization
Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require rea