VDB
Sign up
—

GO-2026-6514

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses

Quick fix

GO-2026-6514 — github.com/perses/perses: upgrade to the fixed version with the command below.

go get github.com/perses/perses@v0.54.0-rc.0

Details

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/perses/perses
Introduced in: 0.43.0Fixed in: 0.54.0-rc.0
Fixgo get github.com/perses/perses@v0.54.0-rc.0

References