{"id":"CVE-2025-41118","summary":"Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection","details":"Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS).\n\nIf the database is configured to use Tencent COS as the storage backend, an attacker could extract the secret_key configuration value from the Pyroscope API.\n\nTo exploit this vulnerability, an attacker needs direct access to the Pyroscope API. We highly recommend limiting the public internet exposure of all our databases, such that they are only accessible by trusted users or internal systems.\n\nThis vulnerability is fixed in versions:\n\n1.15.x: 1.15.2 and above.\n1.16.x: 1.16.1 and above.\n1.17.x: 1.17.0 and above (i.e. all versions).\n\nThanks to Théo Cusnir for reporting this vulnerability to us via our bug bounty program.","aliases":["BIT-grafana-pyroscope-2025-41118","GHSA-m9hq-h476-h2g8","GO-2026-5501"],"modified":"2026-07-11T03:54:33.652561382Z","published":"2026-04-15T19:15:17.689Z","related":["CGA-7cfj-5x64-h679"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.16.0"}],"source":"AFFECTED_FIELD"}],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/41xxx/CVE-2025-41118.json","cna_assigner":"GRAFANA"},"references":[{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-41118.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24503"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2025-41118"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/41xxx/CVE-2025-41118.json"},{"type":"ADVISORY","url":"https://grafana.com/security/security-advisories/cve-2025-41118"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41118"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458796"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/grafana/pyroscope","events":[{"introduced":"0"},{"fixed":"aadf53baca8e7a63efdff9d7be6b923dad5eb561"},{"introduced":"eb30cfb4b05926f75f7566608a054197b816ac67"}],"database_specific":{"cpe":["cpe:2.3:a:grafana:pyroscope:*:*:*:*:*:*:*:*","cpe:2.3:a:grafana:pyroscope:1.16.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.15.2"},{"introduced":"1.16.0"},{"last_affected":"1.16.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["1.16.0","v1.15.1","v1.15.0","weekly-f138-81e0e5ff7","weekly-f139-efb173402","weekly-f137-fac6eccc1","weekly-f136-3b1c0ba1c","weekly-f135-7e6917140","weekly-f134-c67b86ef7","pyroscope-1.15.0","weekly-f133-cd020762f","pyroscope-1.14.2","weekly-f132-cbf9983a9","weekly-f131-76a7e73f0","weekly-f130-21136bae3","pyroscope-1.14.1","weekly-f129-6d0f4264a","weekly-f128-88b215206","weekly-f127-f91bdd32e","weekly-f126-4a2d0a8ed","weekly-f125-16eebf27b","pyroscope-1.14.0","ebpf/v0.4.11","weekly-f124-676e7d611","weekly-f123-5746aa872","weekly-f122-1adf87099","ebpf/v0.4.10","weekly-f121-4ae7eb144","weekly-f121-df35b18dc","weekly-f120-0e4976a03","weekly-f119-2b8e08ac9","pyroscope-1.13.4","weekly-f118-b667f4fd8","weekly-f117-423b76ede","weekly-f116-c0d41e799","weekly-f115-379376557","weekly-f114-078ab1bb9","weekly-f113-3da96b8e4","weekly-f112-8fc4cd636","pyroscope-1.13.1","v1.13.0","pyroscope-1.13.0","weekly-f111-56f1fd257","weekly-f110-32faf96b1","ebpf/v0.4.9","weekly-f109-efeabde84","weekly-f108-a941d1c51","weekly-f107-774426210","weekly-f106-8eb99e062","weekly-f105-886b418af","weekly-f104-96ba89552","weekly-f103-de400bacc","weekly-f102-f4cec5d93","api/v1.2.0","v1.12.0","pyroscope-1.12.0","weekly-f101-67354f378","api/v1.1.0","weekly-f100-b362e0e5f","weekly-f97-6223316db","v1.11.0","pyroscope-1.11.0","weekly-f99-f095b4abb","weekly-f98-2391bdf13","weekly-f96-1886f2c42","pyroscope-1.10.0","weekly-f95-b2e5d0a36","weekly-f94-00f81b9ec","weekly-f93-6e6a07351","weekly-f92-c2f396f57","v1.10.0","weekly-f91-ecfaa4055","weekly-f90-3f6deba39","weekly-f89-266078970","pyroscope-1.9.1","api/v1.0.0","weekly-f87-5f970ee2a","v1.9.0","weekly-f86-2959c0ddc","weekly-f85-66ccaa38e","weekly-f84-8bd07ea07","ebpf/v0.4.8","weekly-f83-e08ff841a","weekly-f82-a718d4335","weekly-f81-d657e8007","weekly-f79-1fafaea62","weekly-f78-060b2b800","pyroscope-1.7.1","v1.7.0","weekly-f76-feefa815b","weekly-f75-e464466e0","weekly-f74-4ff543887","weekly-f73-3fb6d3128","weekly-f72-17534d53b","pyroscope-1.6.1","weekly-f71-251d619d7","weekly-f71-30af2124e","weekly-f69-0c63617ef","pyroscope-1.6.0","v1.6.0","weekly-f68-cf55c09bc","weekly-f67-774085f91","weekly-f66-bbb6aeaaf","ebpf/v0.4.7","weekly-f65-58f66fc6e","weekly-f64-bf51cd848","ebpf/v0.4.6","ebpf/v0.4.5","weekly-f63-0f4662cba","weekly-f63-c9bf04a3f","weekly-f62-77f3e43ce","weekly-f61-ae6c110c7","ebpf/v0.4.4","weekly-f61-f63de9ba0","weekly-f60-4df8fd287","pyroscope-1.5.1","weekly-f59-83e0de8bf","v1.5.0","pyroscope-1.5.0","weekly-f58-478586054","weekly-f57-48d0e99d9","weekly-f56-d25d50f93","weekly-f55-30d1c74c0","pyroscope-1.4.1","v1.4.0","ebpf/v0.4.3","weekly-f54-6d987ed8c","ebpf/v0.4.2","weekly-f53-14f90bfbb","weekly-f52-369ca831e","weekly-f51-ba9d6e72f","weekly-f50-60f453842","pyroscope-1.4.0","v1.3.0","pyroscope-1.3.6","pyroscope-1.3.5","weekly-f49-ec3deff5a","api/v0.4.0","pyroscope-1.3.4","pyroscope-1.3.3","weekly-f48-30877256d","pyroscope-1.3.2","weekly-f47-ba25f2353","weekly-f46-ba25f2353","weekly-f45-50f11fafe","v1.2.1","ebpf/v0.4.1","pyroscope-1.3.1","weekly-f44-80ab1eaf5","weekly-f43-4ddcd54db","weekly-f43-7df628856","ebpf/v0.4.0","api/v0.3.0","weekly-f42-9e55dd123","ebpf/v0.3.3","weekly-f41-d87e810e0","pyroscope-1.3.0","weekly-f40-pprof-sg-67c47fd41","v1.2.0","pyroscope-1.2.0","weekly-f40-8b1337cc","weekly-f40-50654a8b","weekly-f39-hc-21700106","weekly-f39-01fe8157","ebpf/v0.3.2","weekly-f39-73b71664","ebpf/v0.3.1","weekly-f38-568f33db","weekly-f37-b4e6cef4","ebpf/v0.3.0","weekly-f36-bd28123d","pyroscope-1.1.0","api/v0.2.1","weekly-f35-e799b75a","ebpf/v0.2.3","ebpf/v0.2.2","weekly-f34-00fc60f4","weekly-f33-802ff4fa","weekly-f32-904b5611","pyroscope-1.0.3","pyroscope-1.0.2","weekly-f31-8f33e574","weekly-f30-0e65441e","v1.0.0","pyroscope-1.0.1","pyroscope-1.0.0","weekly-f29-3c0121c1","pyroscope-0.9.0","weekly-f28-5b7ce6a1","weekly-f28-d1db88d6","weekly-f28-3d25aa29","weekly-f27-e12e777b","ebpf/v0.2.1","weekly-f27-3e42ace7","pyroscope-0.5.4","weekly-f26-47971383","ebpf/v0.2.0","api/v0.2.0","weekly-f25-8f8d7a23","weekly-f24-3ee46b98","@pyroscope/webapp@1.68.21","@pyroscope/webapp@1.68.20","@pyroscope/flamegraph@0.35.6","@pyroscope/webapp@1.68.19","@pyroscope/webapp@1.68.18","@pyroscope/webapp@1.68.17","@pyroscope/webapp@1.68.16","@pyroscope/webapp@1.68.15","@pyroscope/webapp@1.68.14","@pyroscope/webapp@1.68.13","@pyroscope/webapp@1.68.12","@pyroscope/webapp@1.68.11","@pyroscope/flamegraph@0.35.5","@pyroscope/webapp@1.68.10","@pyroscope/webapp@1.68.9","@pyroscope/panel-plugin@1.4.23","@pyroscope/flamegraph@0.35.4","@pyroscope/webapp@1.68.8","@pyroscope/panel-plugin@1.4.22","@pyroscope/flamegraph@0.35.3","@pyroscope/datasource-plugin@1.3.0","@pyroscope/webapp@1.68.7","@pyroscope/webapp@1.68.6","@pyroscope/panel-plugin@1.4.21","@pyroscope/datasource-plugin@1.2.1","@pyroscope/datasource-plugin@1.2.0","v0.37.2","@pyroscope/webapp@1.68.5","@pyroscope/webapp@1.68.4","@pyroscope/panel-plugin@1.4.20","@pyroscope/models@0.4.7","@pyroscope/flamegraph@0.35.2","@pyroscope/webapp@1.68.3","@pyroscope/panel-plugin@1.4.19","@pyroscope/flamegraph@0.35.1","v0.37.1","v0.37.0","@pyroscope/webapp@1.68.2","@pyroscope/panel-plugin@1.4.18","@pyroscope/flamegraph@0.35.0","@pyroscope/webapp@1.68.1","@pyroscope/webapp@1.68.0","@pyroscope/webapp@1.67.1","@pyroscope/webapp@1.67.0","@pyroscope/webapp@1.66.21","@pyroscope/webapp@1.66.20","v0.36.0","@pyroscope/webapp@1.66.19","@pyroscope/webapp@1.66.18","@pyroscope/panel-plugin@1.4.17","@pyroscope/flamegraph@0.34.3","@pyroscope/webapp@1.66.17","@pyroscope/webapp@1.66.16","@pyroscope/panel-plugin@1.4.16","@pyroscope/flamegraph@0.34.2","v0.35.1","@pyroscope/webapp@1.66.15","@pyroscope/webapp@1.66.14","@pyroscope/panel-plugin@1.4.15","@pyroscope/flamegraph@0.34.1","@pyroscope/webapp@1.66.13","@pyroscope/panel-plugin@1.4.14","@pyroscope/flamegraph@0.34.0","@pyroscope/webapp@1.66.12","@pyroscope/webapp@1.66.11","@pyroscope/webapp@1.66.10","@pyroscope/panel-plugin@1.4.13","@pyroscope/flamegraph@0.33.0","@pyroscope/webapp@1.66.9","@pyroscope/webapp@1.66.8","@pyroscope/webapp@1.66.7","@pyroscope/panel-plugin@1.4.12","@pyroscope/flamegraph@0.32.6","@pyroscope/webapp@1.66.6","v0.35.0","@pyroscope/webapp@1.66.5","@pyroscope/webapp@1.66.4","@pyroscope/panel-plugin@1.4.11","@pyroscope/flamegraph@0.32.5","@pyroscope/webapp@1.66.3","@pyroscope/panel-plugin@1.4.10","@pyroscope/models@0.4.6","@pyroscope/flamegraph@0.32.4","@pyroscope/webapp@1.66.2","@pyroscope/webapp@1.66.1","@pyroscope/panel-plugin@1.4.9","@pyroscope/flamegraph@0.32.3","@pyroscope/webapp@1.66.0","@pyroscope/webapp@1.65.4","@pyroscope/webapp@1.65.3","@pyroscope/webapp@1.65.2","@pyroscope/webapp@1.65.1","@pyroscope/panel-plugin@1.4.8","@pyroscope/flamegraph@0.32.2","v0.34.1","@pyroscope/webapp@1.65.0","@pyroscope/webapp@1.64.1","@pyroscope/panel-plugin@1.4.7","@pyroscope/flamegraph@0.32.1","@pyroscope/webapp@1.64.0","@pyroscope/panel-plugin@1.4.6","@pyroscope/flamegraph@0.32.0","@pyroscope/webapp@1.63.1","@pyroscope/panel-plugin@1.4.5","@pyroscope/flamegraph@0.31.2","@pyroscope/webapp@1.63.0","@pyroscope/webapp@1.62.1","@pyroscope/panel-plugin@1.4.4","@pyroscope/flamegraph@0.31.1","@pyroscope/webapp@1.62.0","v0.34.0","@pyroscope/webapp@1.61.0","@pyroscope/webapp@1.60.0","@pyroscope/webapp@1.59.1","@pyroscope/webapp@1.59.0","@pyroscope/panel-plugin@1.4.3","@pyroscope/flamegraph@0.31.0","@pyroscope/webapp@1.58.7","@pyroscope/panel-plugin@1.4.2","@pyroscope/models@0.4.5","@pyroscope/flamegraph@0.30.1","@pyroscope/panel-plugin@1.4.1","@pyroscope/webapp@1.58.6","@pyroscope/panel-plugin@1.4.0","@pyroscope/flamegraph@0.30.0","@pyroscope/webapp@1.58.5","@pyroscope/webapp@1.58.4","@pyroscope/panel-plugin@1.3.75","@pyroscope/flamegraph@0.29.1","@pyroscope/panel-plugin@1.3.74","@pyroscope/webapp@1.58.3","@pyroscope/panel-plugin@1.3.73","@pyroscope/flamegraph@0.29.0","@pyroscope/webapp@1.58.2","@pyroscope/webapp@1.58.1","@pyroscope/panel-plugin@1.3.72","@pyroscope/flamegraph@0.28.0","@pyroscope/webapp@1.58.0","@pyroscope/panel-plugin@1.3.71","@pyroscope/flamegraph@0.27.0","@pyroscope/webapp@1.57.1","@pyroscope/webapp@1.57.0","@pyroscope/webapp@1.56.9","@pyroscope/panel-plugin@1.3.70","@pyroscope/flamegraph@0.26.0","@pyroscope/webapp@1.56.8","@pyroscope/webapp@1.56.7","@pyroscope/panel-plugin@1.3.69","@pyroscope/flamegraph@0.25.4","@pyroscope/webapp@1.56.6","@pyroscope/webapp@1.56.5","@pyroscope/webapp@1.56.4","@pyroscope/panel-plugin@1.3.68","@pyroscope/flamegraph@0.25.3","@pyroscope/webapp@1.56.3","@pyroscope/webapp@1.56.2","@pyroscope/panel-plugin@1.3.67","@pyroscope/flamegraph@0.25.2","@pyroscope/webapp@1.56.1","@pyroscope/webapp@1.56.0","@pyroscope/webapp@1.55.1","@pyroscope/webapp@1.55.0","@pyroscope/panel-plugin@1.3.66","@pyroscope/flamegraph@0.25.1","@pyroscope/webapp@1.54.2","@pyroscope/webapp@1.54.1","@pyroscope/webapp@1.54.0","@pyroscope/webapp@1.53.0","@pyroscope/panel-plugin@1.3.65","@pyroscope/flamegraph@0.25.0","@pyroscope/webapp@1.52.0","@pyroscope/panel-plugin@1.3.64","@pyroscope/flamegraph@0.24.0","@pyroscope/webapp@1.51.10","@pyroscope/webapp@1.51.9","@pyroscope/webapp@1.51.8","v0.33.0","@pyroscope/webapp@1.51.7","@pyroscope/webapp@1.51.6","@pyroscope/webapp@1.51.5","v0.32.0","@pyroscope/webapp@1.51.4","@pyroscope/webapp@1.51.3","@pyroscope/webapp@1.51.2","v0.31.0","@pyroscope/webapp@1.51.1","@pyroscope/webapp@1.51.0","v0.30.0","@pyroscope/webapp@1.50.1","@pyroscope/webapp@1.50.0","@pyroscope/webapp@1.49.2","@pyroscope/webapp@1.49.1","@pyroscope/webapp@1.49.0","@pyroscope/webapp@1.48.0","@pyroscope/panel-plugin@1.3.63","@pyroscope/flamegraph@0.23.0","@pyroscope/webapp@1.47.0","@pyroscope/webapp@1.46.0","@pyroscope/panel-plugin@1.3.62","@pyroscope/flamegraph@0.22.0","@pyroscope/webapp@1.45.0","@pyroscope/webapp@1.44.0","@pyroscope/webapp@1.43.7","@pyroscope/webapp@1.43.6","@pyroscope/webapp@1.43.5","@pyroscope/webapp@1.43.4","@pyroscope/webapp@1.43.3","@pyroscope/panel-plugin@1.3.61","@pyroscope/flamegraph@0.21.5","@pyroscope/webapp@1.43.2","@pyroscope/webapp@1.43.1","@pyroscope/webapp@1.43.0","@pyroscope/webapp@1.42.4","@pyroscope/webapp@1.42.3","@pyroscope/webapp@1.42.2","@pyroscope/webapp@1.42.1","@pyroscope/webapp@1.42.0","@pyroscope/webapp@1.41.0","v0.29.0","@pyroscope/webapp@1.40.1","@pyroscope/webapp@1.40.0","@pyroscope/webapp@1.39.1","@pyroscope/webapp@1.39.0","@pyroscope/webapp@1.38.6","@pyroscope/webapp@1.38.5","@pyroscope/webapp@1.38.4","@pyroscope/webapp@1.38.3","@pyroscope/webapp@1.38.2","@pyroscope/webapp@1.38.1","@pyroscope/webapp@1.38.0","@pyroscope/webapp@1.37.4","@pyroscope/webapp@1.37.3","v0.28.1","@pyroscope/webapp@1.37.2","@pyroscope/panel-plugin@1.3.60","@pyroscope/flamegraph@0.21.4","@pyroscope/webapp@1.37.1","@pyroscope/panel-plugin@1.3.59","@pyroscope/flamegraph@0.21.3","@pyroscope/webapp@1.37.0","@pyroscope/webapp@1.36.3","@pyroscope/panel-plugin@1.3.58","@pyroscope/flamegraph@0.21.2","@pyroscope/webapp@1.36.2","v0.28.0","@pyroscope/webapp@1.36.1","@pyroscope/panel-plugin@1.3.57","@pyroscope/flamegraph@0.21.1","@pyroscope/webapp@1.36.0","@pyroscope/webapp@1.35.3","@pyroscope/webapp@1.35.2","@pyroscope/webapp@1.35.1","@pyroscope/panel-plugin@1.3.56","@pyroscope/flamegraph@0.21.0","@pyroscope/webapp@1.35.0","@pyroscope/panel-plugin@1.3.55","@pyroscope/flamegraph@0.20.0","@pyroscope/webapp@1.34.1","@pyroscope/panel-plugin@1.3.54","@pyroscope/flamegraph@0.19.3","v0.27.0","@pyroscope/webapp@1.34.0","@pyroscope/webapp@1.33.7","@pyroscope/webapp@1.33.6","@pyroscope/panel-plugin@1.3.53","@pyroscope/models@0.4.4","@pyroscope/flamegraph@0.19.2","@pyroscope/webapp@1.33.5","@pyroscope/panel-plugin@1.3.52","@pyroscope/models@0.4.3","@pyroscope/flamegraph@0.19.1","@pyroscope/webapp@1.33.4","v0.26.0","@pyroscope/webapp@1.33.3","@pyroscope/webapp@1.33.2","@pyroscope/webapp@1.33.1","@pyroscope/webapp@1.33.0","@pyroscope/panel-plugin@1.3.51","@pyroscope/flamegraph@0.19.0","@pyroscope/webapp@1.32.3","@pyroscope/webapp@1.32.2","@pyroscope/webapp@1.32.1","@pyroscope/webapp@1.32.0","@pyroscope/webapp@1.31.1","@pyroscope/panel-plugin@1.3.50","@pyroscope/flamegraph@0.18.6","@pyroscope/webapp@1.31.0","@pyroscope/webapp@1.30.1","@pyroscope/webapp@1.30.0","@pyroscope/webapp@1.29.4","@pyroscope/panel-plugin@1.3.49","@pyroscope/flamegraph@0.18.5","@pyroscope/webapp@1.29.3","@pyroscope/panel-plugin@1.3.48","@pyroscope/flamegraph@0.18.4","@pyroscope/webapp@1.29.2","@pyroscope/webapp@1.29.1","@pyroscope/panel-plugin@1.3.47","@pyroscope/flamegraph@0.18.3","v0.25.1","@pyroscope/webapp@1.29.0","@pyroscope/webapp@1.28.1","@pyroscope/panel-plugin@1.3.46","@pyroscope/flamegraph@0.18.2","@pyroscope/webapp@1.28.0","@pyroscope/webapp@1.27.1","@pyroscope/panel-plugin@1.3.45","@pyroscope/flamegraph@0.18.1","v0.25.0","@pyroscope/webapp@1.27.0","@pyroscope/webapp@1.26.0","@pyroscope/panel-plugin@1.3.44","@pyroscope/flamegraph@0.18.0","@pyroscope/webapp@1.25.0","@pyroscope/webapp@1.24.5","@pyroscope/panel-plugin@1.3.43","@pyroscope/models@0.4.2","@pyroscope/flamegraph@0.17.3","@pyroscope/webapp@1.24.4","@pyroscope/panel-plugin@1.3.42","@pyroscope/flamegraph@0.17.2","@pyroscope/webapp@1.24.3","@pyroscope/panel-plugin@1.3.41","@pyroscope/flamegraph@0.17.1","@pyroscope/webapp@1.24.2","@pyroscope/panel-plugin@1.3.40","@pyroscope/models@0.4.1","@pyroscope/flamegraph@0.17.0","@pyroscope/webapp@1.24.1","@pyroscope/panel-plugin@1.3.39","@pyroscope/flamegraph@0.16.3","@pyroscope/webapp@1.24.0","@pyroscope/webapp@1.23.0","@pyroscope/webapp@1.22.0","@pyroscope/panel-plugin@1.3.38","@pyroscope/models@0.4.0","@pyroscope/flamegraph@0.16.2","v0.24.0","@pyroscope/webapp@1.21.15","@pyroscope/panel-plugin@1.3.37","@pyroscope/flamegraph@0.16.1","@pyroscope/webapp@1.21.14","@pyroscope/webapp@1.21.13","@pyroscope/panel-plugin@1.3.36","@pyroscope/flamegraph@0.16.0","@pyroscope/webapp@1.21.12","@pyroscope/panel-plugin@1.3.35","@pyroscope/models@0.3.0","@pyroscope/flamegraph@0.15.0","v0.23.0","@pyroscope/webapp@1.21.11","@pyroscope/webapp@1.21.10","@pyroscope/webapp@1.21.9","@pyroscope/panel-plugin@1.3.34","@pyroscope/flamegraph@0.14.9","v0.22.1","@pyroscope/webapp@1.21.8","@pyroscope/panel-plugin@1.3.33","@pyroscope/flamegraph@0.14.8","@pyroscope/webapp@1.21.7","@pyroscope/panel-plugin@1.3.32","@pyroscope/flamegraph@0.14.7","@pyroscope/webapp@1.21.6","@pyroscope/panel-plugin@1.3.31","@pyroscope/flamegraph@0.14.6","@pyroscope/webapp@1.21.5","@pyroscope/panel-plugin@1.3.30","@pyroscope/flamegraph@0.14.5","@pyroscope/webapp@1.21.4","@pyroscope/panel-plugin@1.3.29","@pyroscope/models@0.2.3","@pyroscope/flamegraph@0.14.4","v0.22.0","@pyroscope/panel-plugin@1.3.28","@pyroscope/webapp@1.21.3","@pyroscope/panel-plugin@1.3.27","@pyroscope/flamegraph@0.14.3","@pyroscope/webapp@1.21.2","@pyroscope/panel-plugin@1.3.26","@pyroscope/flamegraph@0.14.2","@pyroscope/webapp@1.21.1","@pyroscope/panel-plugin@1.3.25","@pyroscope/flamegraph@0.14.1","@pyroscope/webapp@1.21.0","@pyroscope/panel-plugin@1.3.24","@pyroscope/flamegraph@0.14.0","@pyroscope/webapp@1.20.0","@pyroscope/panel-plugin@1.3.23","@pyroscope/flamegraph@0.13.0","@pyroscope/webapp@1.19.3","@pyroscope/panel-plugin@1.3.22","@pyroscope/flamegraph@0.12.5","@pyroscope/webapp@1.19.2","@pyroscope/panel-plugin@1.3.21","@pyroscope/models@0.2.2","@pyroscope/flamegraph@0.12.4","@pyroscope/webapp@1.19.1","@pyroscope/webapp@1.19.0","@pyroscope/webapp@1.18.5","@pyroscope/webapp@1.18.4","@pyroscope/panel-plugin@1.3.20","@pyroscope/flamegraph@0.12.3","@pyroscope/webapp@1.18.3","@pyroscope/webapp@1.18.2","@pyroscope/panel-plugin@1.3.19","@pyroscope/flamegraph@0.12.2","@pyroscope/datasource-plugin@1.1.5","@pyroscope/webapp@1.18.1","@pyroscope/panel-plugin@1.3.18","@pyroscope/models@0.2.1","@pyroscope/flamegraph@0.12.1","@pyroscope/webapp@1.18.0","@pyroscope/panel-plugin@1.3.17","@pyroscope/models@0.2.0","@pyroscope/flamegraph@0.12.0","@pyroscope/webapp@1.17.5","@pyroscope/webapp@1.17.4","@pyroscope/panel-plugin@1.3.16","@pyroscope/flamegraph@0.11.0","v0.21.0","@pyroscope/webapp@1.17.3","@pyroscope/webapp@1.17.2","@pyroscope/webapp@1.17.1","@pyroscope/panel-plugin@1.3.15","@pyroscope/flamegraph@0.10.1","@pyroscope/webapp@1.17.0","@pyroscope/webapp@1.16.0","@pyroscope/panel-plugin@1.3.14","@pyroscope/flamegraph@0.10.0","@pyroscope/webapp@1.15.1","@pyroscope/panel-plugin@1.3.13","@pyroscope/flamegraph@0.9.7","@pyroscope/webapp@1.15.0","@pyroscope/webapp@1.14.0","@pyroscope/webapp@1.13.6","@pyroscope/webapp@1.13.5","@pyroscope/panel-plugin@1.3.12","@pyroscope/flamegraph@0.9.6","@pyroscope/webapp@1.13.4","@pyroscope/panel-plugin@1.3.11","@pyroscope/flamegraph@0.9.5","@pyroscope/webapp@1.13.3","@pyroscope/webapp@1.13.2","@pyroscope/panel-plugin@1.3.10","@pyroscope/flamegraph@0.9.4","@pyroscope/webapp@1.13.1","@pyroscope/panel-plugin@1.3.9","@pyroscope/flamegraph@0.9.3","@pyroscope/webapp@1.13.0","@pyroscope/webapp@1.12.2","@pyroscope/webapp@1.12.1","@pyroscope/panel-plugin@1.3.8","@pyroscope/flamegraph@0.9.2","@pyroscope/webapp@1.12.0","@pyroscope/webapp@1.11.8","@pyroscope/panel-plugin@1.3.7","@pyroscope/flamegraph@0.9.1","@pyroscope/webapp@1.11.7","v0.20.0","@pyroscope/webapp@1.11.6","@pyroscope/panel-plugin@1.3.6","@pyroscope/models@0.1.0","@pyroscope/flamegraph@0.9.0","@pyroscope/webapp@1.11.5","v0.19.0","@pyroscope/webapp@1.11.4","@pyroscope/panel-plugin@1.3.5","@pyroscope/flamegraph@0.8.4","@pyroscope/webapp@1.11.3","@pyroscope/panel-plugin@1.3.4","@pyroscope/flamegraph@0.8.3","@pyroscope/webapp@1.11.2","@pyroscope/panel-plugin@1.3.3","@pyroscope/flamegraph@0.8.2","@pyroscope/webapp@1.11.1","@pyroscope/panel-plugin@1.3.2","@pyroscope/flamegraph@0.8.1","@pyroscope/webapp@1.11.0","@pyroscope/panel-plugin@1.3.1","@pyroscope/flamegraph@0.8.0","@pyroscope/webapp@1.10.4","@pyroscope/webapp@1.10.3","@pyroscope/webapp@1.10.2","@pyroscope/webapp@1.10.1","v0.18.0","@pyroscope/webapp@1.10.0","@pyroscope/webapp@1.9.0","@pyroscope/panel-plugin@1.3.0","@pyroscope/flamegraph@0.7.0","@pyroscope/webapp@1.8.8","@pyroscope/panel-plugin@1.2.25","@pyroscope/flamegraph@0.6.4","v0.17.1","v0.17.0","@pyroscope/webapp@1.8.7","@pyroscope/webapp@1.8.6","@pyroscope/panel-plugin@1.2.24","@pyroscope/flamegraph@0.6.3","@pyroscope/webapp@1.8.5","@pyroscope/webapp@1.8.4","@pyroscope/panel-plugin@1.2.23","@pyroscope/flamegraph@0.6.2","v0.16.0","@pyroscope/webapp@1.8.3","@pyroscope/webapp@1.8.2","@pyroscope/panel-plugin@1.2.22","@pyroscope/flamegraph@0.6.1","@pyroscope/webapp@1.8.1","@pyroscope/webapp@1.8.0","@pyroscope/webapp@1.7.1","@pyroscope/panel-plugin@1.2.21","@pyroscope/flamegraph@0.6.0","@pyroscope/webapp@1.7.0","@pyroscope/panel-plugin@1.2.20","@pyroscope/flamegraph@0.5.0","v0.15.4","@pyroscope/webapp@1.6.5","v0.15.3","@pyroscope/webapp@1.6.4","@pyroscope/panel-plugin@1.2.19","@pyroscope/flamegraph@0.4.0","@pyroscope/webapp@1.6.3","@pyroscope/webapp@1.6.2","@pyroscope/panel-plugin@1.2.18","@pyroscope/models@0.0.7","@pyroscope/flamegraph@0.3.1","v0.15.2","@pyroscope/webapp@1.6.1","v0.15.1","@pyroscope/webapp@1.6.0","@pyroscope/panel-plugin@1.2.17","@pyroscope/flamegraph@0.3.0","@pyroscope/webapp@1.5.0","@pyroscope/webapp@1.4.11","v0.15.0","@pyroscope/webapp@1.4.10","@pyroscope/webapp@1.4.9","@pyroscope/panel-plugin@1.2.16","@pyroscope/flamegraph@0.2.7","@pyroscope/webapp@1.4.8","@pyroscope/panel-plugin@1.2.15","@pyroscope/models@0.0.6","@pyroscope/flamegraph@0.2.6","@pyroscope/webapp@1.4.7","@pyroscope/webapp@1.4.6","@pyroscope/panel-plugin@1.2.14","@pyroscope/models@0.0.5","@pyroscope/flamegraph@0.2.5","@pyroscope/datasource-plugin@1.1.4","@pyroscope/webapp@1.4.5","v0.14.0","@pyroscope/webapp@1.4.4","@pyroscope/webapp@1.4.3","@pyroscope/webapp@1.4.2","@pyroscope/webapp@1.4.1","@pyroscope/panel-plugin@1.2.13","@pyroscope/flamegraph@0.2.4","@pyroscope/webapp@1.4.0","@pyroscope/webapp@1.3.3","@pyroscope/panel-plugin@1.2.12","@pyroscope/flamegraph@0.2.3","@pyroscope/webapp@1.3.2","@pyroscope/panel-plugin@1.2.11","@pyroscope/flamegraph@0.2.2","@pyroscope/webapp@1.3.1","@pyroscope/panel-plugin@1.2.10","@pyroscope/models@0.0.4","@pyroscope/flamegraph@0.2.1","v0.13.0","@pyroscope/webapp@1.3.0","@pyroscope/webapp@1.2.0","@pyroscope/webapp@1.1.10","@pyroscope/webapp@1.1.9","@pyroscope/webapp@1.1.8","@pyroscope/webapp@1.1.7","@pyroscope/panel-plugin@1.2.9","@pyroscope/flamegraph@0.2.0","@pyroscope/webapp@1.1.6","@pyroscope/panel-plugin@1.2.8","@pyroscope/flamegraph@0.1.3","@pyroscope/webapp@1.1.5","@pyroscope/panel-plugin@1.2.7","@pyroscope/models@0.0.3","@pyroscope/flamegraph@0.1.2","@pyroscope/webapp@1.1.4","v0.12.0","@pyroscope/webapp@1.1.3","@pyroscope/panel-plugin@1.2.6","@pyroscope/flamegraph@0.1.1","@pyroscope/webapp@1.1.2","@pyroscope/panel-plugin@1.2.5","@pyroscope/flamegraph@0.1.0","@pyroscope/webapp@1.1.1","v0.11.1","@pyroscope/webapp@1.1.0","@pyroscope/panel-plugin@1.2.4","@pyroscope/models@0.0.2","@pyroscope/flamegraph@0.0.6","v0.11.0","@pyroscope/datasource-plugin@1.1.3","@pyroscope/datasource-plugin@1.1.2","@pyroscope/panel-plugin@1.2.3","@pyroscope/panel-plugin@1.2.2","@pyroscope/flamegraph@0.0.5","@pyroscope/panel-plugin@1.2.1","@pyroscope/flamegraph@0.0.3","@pyroscope/flamegraph@0.0.2","v0.10.2","v0.10.1","v0.10.0","v0.9.0","v0.8.0","v0.7.2","v0.7.1","v0.7.0","v0.6.0","v0.5.1","v0.5.0","v0.4.1","v0.4.0","v0.3.1","v0.3.0","v0.2.5","v0.2.4","v0.2.3","v0.2.2","v0.2.1","v0.2.0","v0.1.0","v0.0.41","v0.0.40","v0.0.39","v0.0.38","v0.0.37","v0.0.36","v0.0.35","v0.0.34","v0.0.33","v0.0.32","v0.0.31","v0.0.30","v0.0.29","v0.0.28","v0.0.26","v0.0.25","v0.0.24","v0.0.23","v0.0.22","v0.0.21","v0.0.20","v0.0.19","v0.0.18","v0.0.17","v0.0.16","v0.0.15","v0.0.14","v0.0.13","v0.0.12","v0.0.11","v0.0.10"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-41118.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}