CVE-2026-28383 Grafana plugin resources can lead to unbounded memory allocation

A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service...

CVE-2026-28383

A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service...

Allocation of Resources Without Limits or Throttling

Overview github.com/grafana/grafana/pkg/api is an open and composable observability and data visualization platform. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the plugin resources endpoint when the system reads the entire request...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the push endpoint. An attacker can exhaust system memory and cause a service outage by sending a large or continuous request body to the API. Remediation Upgrade...

CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources...

CVE-2026-42032

CKAN ( datastore_search_sql ) vulnerability allowing unauthenticated authorization bypass. Affects CKAN data management system; prior to versions 2.10.10 and 2.11.5, attackers could bypass authorization to access private resources and PostgreSQL system information. Fixed in CKAN 2.10.10 and 2.11....

CVE-2026-42032

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to bypass authorization in order to gain access to private resources and PostgreSQL system information This vulnerability...

CVE-2026-42031

CKAN, an open-source data management system , contains an unauthenticated SQL injection vulnerability in the datastore_search_sql API endpoint. This flaw allows attackers to inject SQL statements to gain unauthorized access to private resources and PostgreSQL system information . The potential im...

CVE-2026-42031 CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information This vulnerability is fixed ...

CVE-2026-42031

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information This vulnerability is fixed ...

CVE-2026-42031

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information This vulnerability is fixed ...

EUVD-2026-30002

When embedded Packet Velocity Acceleration ePVA acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel TMM resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources. Work around: No known workarounds exist for this issue...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44798 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44798 Source advisory: OSV:GHSA-P3HX-PWF3-J8WR...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44798 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44798 Source advisory: GHSA-P3HX-PWF3-J8WR...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44798 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44798 Source advisory: SNYK:PYTHON-NAUTOBOT-16691141...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44797 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44797 Source advisory: GHSA-C35Q-VXRP-PH26...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44797 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44797 Source advisory: SNYK:PYTHON-NAUTOBOT-16691212...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44796 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44796 Source advisory: OSV:GHSA-QRPW-GJVH-X5GM...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-44794 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-44794 Source advisory: GHSA-WPXJ-44W3-2J6X...