VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/grafana/loki/v3: vulnerability history, versions and safety

github.com/grafana/loki/v3 is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 120 releases, first recorded in Apr 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded M1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
1 in the last 12 months

Most recent disclosure 15 Apr 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/grafana/loki/v3 vulnerabilities

Vulert verdict on github.com/grafana/loki/v3 v3.7.9 i

Updated on 23 Oct 2026

Action needed: v3.7.9 has 1 known vulnerability, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 94/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Active

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v3.7.9 — affected i
  • Vulnerabilities on record 1 over 1 year · 1 in the last year i
  • Latest disclosure 15 Apr 2026 i
  • Highest CVSS 5.3 i
  • With no published fix 0 i
  • Stars 29,049 i
  • OpenSSF scorecard 8/10 i
  • Last release this month i
  • Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/grafana/loki/v3, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v3.0.0-20261023102826-fab051276479 23 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261023100837-14bdedb486e0 23 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261023072424-ed52d7282506 23 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261023060100-862c93ffe3a4 23 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022232149-1566e9f2bcd5 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022220302-be73bce830ab 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022205253-a3ea898947b8 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022200112-bd029bce96e2 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022190959-c8b8646f9232 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022171256-cd95f09ff18b 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022161548-fdb6b7af1bf6 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022153248-779b98193f7a 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022151306-e644ef320306 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022123203-14f73b26d098 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022103607-ce961feb092f 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261022095441-182c3bb41b15 22 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261021195341-fdeb199c5b0a 21 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261021185145-3c9dd3ea5dae 21 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261021152110-92c92f305441 21 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261021124305-abfe7b732c1c 21 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261021111955-12c124353b6d 21 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261021105937-58c177ee9aa8 21 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.6.19 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020212135-d3b4a2f76bfc 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.7.9 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020212112-d1725e71417c 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020184313-610e593d485d 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020174036-6c2178d32c8b 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020154409-9711ff2404b9 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020150632-4c2cfd3f9415 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020140912-d2c17f77a050 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261020134310-b6df67db34dd 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.7.9-0.20261020072648-74b0c8620c78 20 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019220202-c1b5bdbece3a 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019191819-e90f51aadde1 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019190401-42cca2faa121 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019170513-f2dca78dc0d0 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019160125-d1bd9a13b228 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019150542-55ec63078fb6 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019122241-cbcc71fcc6b4 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019090819-3157f0baad46 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019072318-486ae0ec1c1d 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019031927-232b0771cdb5 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261019001705-24abd1899bf1 19 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261018185148-ab61271a42f3 18 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261018164228-9a8793cc14b0 18 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261017185406-9fcfec063b38 17 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261017154321-2c3bc29158f6 17 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261017123020-01780e9e106b 17 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261017094151-34cc71c6908c 17 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261017064302-870c04ef096b 17 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016220138-18f355b96330 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016210217-1199f27ec55d 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016192651-4ab641b657be 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016191108-d2294f893611 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016183226-21c1b32ff14a 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016180107-84ab8240c7fa 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016170842-3a2b7a60f093 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016160838-6cbabab4cd1d 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016154721-82b56b6406dc 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016150912-e4a3b30ca1d5 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016135501-988a7faf547e 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016132641-f232a7cd9cd9 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016123020-c3d3bfc0e9ea 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016122423-b9b26afb3494 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016094218-ac5cf3c18d3b 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016093118-9655f4bcec77 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016091042-64465da6b439 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016063706-b13a0ab8f447 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261016062334-67cda0196426 16 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015223929-f326525edd28 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015220040-d35f7192036a 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015192129-7407b88318c4 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015191041-1d6f9e271320 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015180341-7383d1a2b88a 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015165359-1c0a52e944b4 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015143358-c969f5cf4b4c 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.6.18 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015140112-f6168ee5173f 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015132712-597a49a9ec45 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015114407-73386c0997da 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015111452-1409fa8692d4 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015100309-49f4abc0971f 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015090234-88b4d9b6afba 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261015053729-ee18fc2fe2c5 15 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014220042-5fcd99aa6dea 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.6.18-0.20261014214730-603de5ad370c 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014172117-febb00b049dd 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014165530-f0a69b558ceb 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014154038-89564d01348b 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014134251-3fc344f953dd 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014122516-0c9ea1509da1 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261014102910-f006543310f3 14 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013220054-9cef7b9f7723 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013200932-b54b1cf972d7 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013175557-d4e401b5e4fc 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013165643-9648a592fafa 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013150105-b7bbd40ee23a 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013133537-0c70fccb5643 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013122422-9f4c74f126fb 13 Oct 2026 M1 AGPL-3.0 Yes Details →
v3.0.0-20261013111858-bfa341d5f64d 13 Oct 2026 M1 — Yes Details →
v3.0.0-20261013084911-a97d496a393e 13 Oct 2026 M1 — Yes Details →
v3.0.0-20261013044127-1bb6683ed3cc 13 Oct 2026 M1 — Yes Details →
v3.0.0-20261012182635-bc1962860a16 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012181852-4c243e038ab7 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012170431-55ff42e20b3a 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012164859-a3f754f98f7d 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012160824-d30bc7352608 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012135724-10148ed97fb2 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012130226-b09a6a431162 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012080708-fcae97831468 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012040159-f2fb27f86f03 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261012015318-dc2ceb46fa41 12 Oct 2026 M1 — Yes Details →
v3.0.0-20261011215510-3aafbb4979c5 11 Oct 2026 M1 — Yes Details →
v3.0.0-20261011183221-bc5700eb024b 11 Oct 2026 M1 — Yes Details →
v3.0.0-20261011152635-cdf6ef074d55 11 Oct 2026 M1 — Yes Details →
v3.0.0-20261011122940-8fe8007947fa 11 Oct 2026 M1 — Yes Details →
v3.0.0-20261011092406-893854688cad 11 Oct 2026 M1 — Yes Details →
v3.0.0-20261011063947-5905869fbf35 11 Oct 2026 M1 — Yes Details →
v3.0.0-20261010185223-36ab332c8b5d 10 Oct 2026 M1 — Yes Details →

The newest 120 of 3,233 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2026 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 1 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/grafana/loki/v3

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2026-21726: Grafana Loki Path Traversal Vulnerability Bypass 5.3 medium 3.6.4 15 Apr 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/grafana/loki/v3

Is github.com/grafana/loki/v3 safe to use?

Vulert records 1 vulnerabilities for github.com/grafana/loki/v3 in Go: 0 critical, 0 high, 1 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/grafana/loki/v3's Vulert package health score?

Vulert scores github.com/grafana/loki/v3 94/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/grafana/loki/v3 affected?

Yes. v3.7.9, the version you would install today, has 1 known vulnerability, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/grafana/loki/v3 have?

1 vulnerability is recorded for github.com/grafana/loki/v3 in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/grafana/loki/v3 vulnerabilities disclosed?

1 vulnerability was recorded for github.com/grafana/loki/v3 in the last 12 months, and the oldest entry in this database dates to 15 Apr 2026. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/grafana/loki/v3 are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/grafana/loki/v3 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/grafana/loki/v3 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.