← All credits

arang

4 vulnerability records and advisories credit this contributor.

Dashboard snapshot permission bypass

Improper post type validation on scheduled post endpoints

Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir

Incoming webhook user attribution via unvalidated webhook owner