The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
{ "binaries": [ { "binary_name": "grafana", "binary_version": "2.6.0+dfsg-1" }, { "binary_name": "grafana-data", "binary_version": "2.6.0+dfsg-1" } ] }