An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-8609.json"