Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6664
  • Go/github.com/grafana/grafana
 Grafana legacy correlations allow cross-tenant disclosure and deletion in... 07 Oct
  • No fix available
GO-2026-6541
  • Go/github.com/grafana/grafana
 Grafana: Pre-authentication denial of service in the public dashboard query handler in github.com/grafana/grafana 28 Sep
  • No fix available
GO-2026-6542
  • Go/github.com/grafana/grafana
 Grafana geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug in github.com/grafana/grafana 28 Sep
  • No fix available
GO-2026-6544
  • Go/github.com/grafana/grafana
 Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana 28 Sep
  • No fix available
GO-2026-6545
  • Go/github.com/grafana/grafana
 Grafana: Path traversal in the Tempo and Loki data source plugins in github.com/grafana/grafana 28 Sep
  • No fix available
GO-2026-5708
  • Go/github.com/grafana/grafana
 Grafana: Users can generate Service Account tokens after permissions removal in github.com/grafana/grafana 25 Jun
  • No fix available
GO-2026-5409
  • Go/github.com/grafana/grafana
 Grafana: SQL Expressions Read File From Disk in github.com/grafana/grafana 25 Jun
  • No fix available
GO-2026-5332
  • Go/github.com/grafana/grafana
 Grafana has a Cross-site Scripting issue in github.com/grafana/grafana 25 Jun
  • No fix available
GO-2026-5219
  • Go/github.com/grafana/grafana
 Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions in github.com/grafana/grafana 25 Jun
  • No fix available
GO-2026-5095
  • Go/github.com/grafana/grafana
 Grafana public dashboards disclose all direct mode datasources in github.com/grafana/grafana 25 Jun
  • No fix available
GHSA-3w66-95m3-8jxg
  • Go/github.com/grafana/grafana
 Grafana: Pre-authentication denial of service in the public dashboard query handler 22 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-9g84-39mm-q4p3
  • Go/github.com/grafana/grafana
 Grafana geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug 22 Jun
  • Fix available
  • Severity - 7.3 (High)
GHSA-9493-h4f5-633x
  • Go/github.com/grafana/grafana
 Grafana: Path traversal in the Tempo and Loki data source plugins 22 Jun
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-f74p-cwhp-x2wx
  • Go/github.com/grafana/grafana
 Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. 22 Jun
  • Fix available
  • Severity - 7.7 (High)
GHSA-gxcp-jjxh-rwp4
  • Go/github.com/grafana/grafana
 Grafana: SQL Expressions Read File From Disk 13 May
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-wfhv-mj62-f5xh
  • Go/github.com/grafana/grafana
 Grafana: Users can generate Service Account tokens after permissions removal 13 May
  • Fix available
  • Severity - 5.9 (Medium)
Load more...