Advisories · Technology
signoz.
Every CVE that names signoz among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.6 High
SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass
- signoz
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+
SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret
- signoz
- CWE-1188
- CVSS 8.4 High
SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names
- signoz
- SQL injection
- CVSS 8.4 High
SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builders
- signoz
- SQL injection
- CVSS 8.8 High
SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints
- signoz
- Authentication bypass
- Broken access control
- CVSS 7.6 High
SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft
- signoz
- Open redirect
- CWE-345
- CVSS 6.1 Medium
SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
- signoz
- Broken access control
- CVSS 8.3 High
SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter
- signoz
- SQL injection