Vulnerability Database

CLEANSTART-2026-VK48825

CleanStart/grafana

Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy yesterday

Fix available
Severity - 9.8 (Critical)

ECHO-d475-f680-bede

Echo/grafana-12.3-fips

See record for full details 08 Sep

Fix available

CLEANSTART-2026-LC55153

CleanStart/grafana

Security fixes for CVE-2026-21728, CVE-2026-2303, CVE-2026-28377, CVE-2026-42151, CVE-2026-44903, CVE-2026-48096, CVE-2026-55170, CVE-2026-55689, ghsa-8396-jffm-qx4w, ghsa-cf98-j28v-49v6, ghsa-cp6g-7hqx-qxhp, ghsa-ffqx-q65f-36jf, ghsa-fw8g-cg8f-9j28, ghsa-hcxc-wf8j-23hv, ghsa-mpwr-8vm7-h73f, ghsa-p4r4-xvrq-gvmc, ghsa-w8rr-5gcm-pp58, ghsa-wg65-39gg-5wfj applied in versions: 12.2.10-r1, 13.1.0-r1 21 Jul

Fix available

CGA-x6f7-ppwx-525h

Chainguard/commercial-grafana-13.1

See record for full details 13 Jul

Fix available
Severity - 2.1 (Low)

CGA-f56m-gv4j-cpv9

Chainguard/commercial-grafana-13.1

See record for full details 13 Jul

Fix available
Severity - 2.1 (Low)

CVE-2026-55170

github.com/openfga/helm-charts
github.com/openfga/openfga

OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions 09 Jul

Fix available
Severity - 2.1 (Low)

GO-2026-5322

Go/github.com/openfga/openfga

OpenFGA Improper Policy Enforcement in github.com/openfga/openfga 25 Jun

Fix available

MINI-2q63-vv2c-g7wc

MinimOS/grafana-12.2