CVE-2024-41809

MEDIUM 6.1CVE-2024-41809 · Published 25/07/2024 · updated 17/06/2026

In short

CVE-2024-41809 is a MEDIUM (CVSS 6.1) vulnerability affecting openobserve (openobserve).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.8% of all vulnerabilities.
Fix: update to 0.10.0 or later.

Package	Affected versions	Patched versions
openobserve openobserve	`≥ 0.4.4, < 0.10.0`	`0.10.0`

Description

OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve contains a cross-site scripting vulnerability in line 32 of `openobserve/web/src/views/MemberSubscription.vue`. Version 0.10.0 sanitizes incoming html.

References

openobserve/openobserve · Product
openobserve/openobserve commit 2334377 · Patch
openobserve/openobserve commit 6458726 · Patch
openobserve/openobserve security advisory · Third Party Advisory

More vulnerabilities in openobserve

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openobserve

≥ 0.4.4, < 0.10.0

0.10.0

More vulnerabilities in openobserve

See all →