Perses project query parameter authorization bypass exposes cross-project resources

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-63458 · Microsoft / collected KEV context

EUVD-2026-83266

GHSA-cjgj-2fwf-4c2w

GO-2026-6518

cve-program · CVE-2026-63458

• https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w
• https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540
• https://github.com/perses/perses/releases/tag/v0.54.0-beta.3

euvd · EUVD-2026-83266

• https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w
• https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540
• https://github.com/perses/perses/releases/tag/v0.54.0-beta.3

nvd · CVE-2026-63458

• https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540
• https://github.com/perses/perses/releases/tag/v0.54.0-beta.3
• https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w

osv · GHSA-cjgj-2fwf-4c2w

• https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w
• https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540
• https://github.com/perses/perses
• https://github.com/perses/perses/releases/tag/v0.54.0-beta.3

osv · GO-2026-6518

• https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w
• https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540
• https://github.com/perses/perses/releases/tag/v0.54.0-beta.3

No related operational record is retained in the current change model.