mimir vulnerabilities

CVEs whose affected-version data names the mimir package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81938High· 7.7

6d ago

Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: http_headers.<name>.files and basic_auth.username_file. A tenant permitted to …

▾ TwilightGrafana · Enterprise Metrics (GEM)EPSS 0.39%via CVEORG