Known Vulnerabilities for Signoz by SigNoz
Listed below are 6 of the newest known vulnerabilities associated with "Signoz" by "SigNoz".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-97056 json | SigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which w... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-97055 json | SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOKENIZE... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-93426 json | SigNoz versions 0.87.0 before 0.142.0 fail to escape user-supplied telemetry field-key names in the v5 query_range API, allow... | Not Provided | 2026-09-17 | 2026-09-18 |
| CVE-2026-93292 json | SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that int... | Not Provided | 2026-09-17 | 2026-09-21 |
| CVE-2026-92729 json | SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP h... | Not Provided | 2026-09-16 | 2026-09-21 |
| CVE-2026-63094 json | SigNoz before 0.134.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated atta... | Not Provided | 2026-07-17 | 2026-07-27 |