[ Vendor · 2 CVEs ]
SigNoz
CVEs affecting SigNoz published in the last 30 days, plus any SigNoz CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97055 | 24 Sep 2026 | CVSS 8.1 | signozSigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOKENIZER_JWT_SECRET or the… | |
| CVE-2026-97056 | 24 Sep 2026 | CVSS 6.8 | signozSigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default… |