openobserve vulnerabilities
CVEs whose affected-version data names the openobserve package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-63645High· 7.5OpenObserve is a cloud-native observability platform
OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server configuration after applying the hide_sensitive_fields ke…
▾ Twilightopenobserve · openobserveEPSS 0.33%via NVD
CVE-2026-39361High· 7.7OpenObserve is a cloud-native observability platform
OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url function in src/handler/http/request/enrichment_table/mod.rs fails to block IPv6 addresses because Rust's url crate returns them wit…
▾ Twilightopenobserve · openobserveEPSS 0.27%via NVD