github.com/cortexproject/cortex vulnerabilities (Go)

4 vulnerabilities.

• github.com/cortexproject/cortex Go cortex establishes TLS connections with `InsecureSkipVerify` set to `true` CVE-2024-41265 Fix available 7.5 HighAugust 1, 2024
• github.com/cortexproject/cortex Go Alertmanager can expose local files content via specially crafted config CVE-2022-23536 Fix available 6.5 MediumDecember 19, 2022
• github.com/cortexproject/cortex Go Path traversal in Grafana Cortex CVE-2021-36157 5.3 MediumAugust 3, 2021
• github.com/cortexproject/cortex Go Improper input validation in CNCF Cortex CVE-2021-31232 Fix available 5.5 MediumApril 30, 2021