Pyroscope

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-41118 Apr 15, 19:15 Go CRITICAL PATCH GHSA Act Now

Information disclosure in Pyroscope enables unauthenticated remote attackers to extract the Tencent Cloud Object Storage (COS) secret_key from the API if the database is configured with the Tencent COS storage backend. Fixed versions are 1.15.2, 1.16.1, and all 1.17.x releases. No active exploitation or public exploit code has been identified at this time.

Information Disclosure Grafana Pyroscope

NVD VulDB

CVSS 3.1

9.1

EPSS

0.0%

CVE-2025-41118 Go

EPSS 0% CVSS 9.1

CRITICAL PATCH Act Now

Information disclosure in Pyroscope enables unauthenticated remote attackers to extract the Tencent Cloud Object Storage (COS) secret_key from the API if the database is configured with the Tencent COS storage backend. Fixed versions are 1.15.2, 1.16.1, and all 1.17.x releases. No active exploitation or public exploit code has been identified at this time.

Information Disclosure Grafana Pyroscope

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy