MEDIUM6.5Go
GHSA-cq2g-pw6q-hf7j· CVE-2022-23536, GO-2022-1175Cortex's Alertmanager can expose local files content via specially crafted config
Modified: 11/8/2023
package
Go/github.com/cortexproject/cortex
pkg:go/github.com/cortexproject/cortex
MEDIUMGo
GHSA-jphm-g89m-v42p· CVE-2021-36157Path traversal in Grafana Cortex
Modified: 11/8/2023
MEDIUM5.5Go
GHSA-m45g-f45x-vv22· CVE-2021-31232, GO-2022-0915Improper input validation in CNCF Cortex
Modified: 8/21/2024
HIGHGo
GHSA-vw7g-3cc7-7rmh· CVE-2024-41265, GO-2024-3036cortex establishes TLS connections with `InsecureSkipVerify` set to `true`
Modified: 12/20/2025
—Go
GO-2022-0915· CVE-2021-31232, GHSA-m45g-f45x-vv22Improper input validation in CNCF Cortex in github.com/cortexproject/cortex
Modified: 3/3/2026
—Go
GO-2022-1175· CVE-2022-23536, GHSA-cq2g-pw6q-hf7jExposure of local files in github.com/cortexproject/cortex
Modified: 5/20/2024