BIT-grafana-2026-27879

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/grafana/BIT-grafana-2026-27879.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-grafana-2026-27879
Aliases
  • CVE-2026-27879
Published
2026-04-01T08:41:11.477Z
Modified
2026-04-08T09:15:21.491245Z
Summary
Query resampling can cause unbounded memory allocations
Details

A resample query can be used to trigger out-of-memory crashes in Grafana.

Database specific
{
    "cpes": [
        "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:grafana:grafana:*:*:*:*:*:go:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / grafana

Package

Name
grafana
Purl
pkg:bitnami/grafana

Severity

  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
8.0.0
Fixed
11.6.14
Introduced
12.0.0
Fixed
12.1.10
Introduced
12.2.0
Fixed
12.2.8
Introduced
12.3.0
Fixed
12.3.6
Introduced
12.4.0
Fixed
12.4.2

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/grafana/BIT-grafana-2026-27879.json"