Alerta_project Alerta
2 CVEs affecting Alerta_project Alerta. Latest disclosed: 2026-03-31. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-34400 | Critical | 9.8 | 2026-03-31 | Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL injection via the Postgres query parser, which buil… |
CVE-2020-26214 | Critical | 9.1 | 2020-11-06 | In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP a… |