BIT-grafana-2026-28375

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/grafana/BIT-grafana-2026-28375.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-grafana-2026-28375
Aliases
  • CVE-2026-28375
Published
2026-04-01T08:41:15.363Z
Modified
2026-04-08T09:15:29.513675Z
Summary
Grafana Testdata datasource can issue unbounded memory allocations
Details

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.

Database specific
{
    "cpes": [
        "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:grafana:grafana:*:*:*:*:*:go:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / grafana

Package

Name
grafana
Purl
pkg:bitnami/grafana

Severity

  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
8.1.0
Fixed
11.6.14
Introduced
12.0.0
Fixed
12.1.10
Introduced
12.2.0
Fixed
12.2.8
Introduced
12.3.0
Fixed
12.3.6
Introduced
12.4.0
Fixed
12.4.2

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/grafana/BIT-grafana-2026-28375.json"