CLEANSTART-2026-RU71621 Security fixes in grafana 12.4.7-r1

Package grafana version 12.4.7-r1 fixes 10 vulnerabilities: ghsa-r277-6w6q-xmqw, ghsa-jpcw-4wr7-c3vq, ghsa-gcjh-h69q-9w9g, CVE-2026-21728, CVE-2026-28377...

CLEANSTART-2026-VI74714 Security fixes in grafana 13.0.5-r1

Package grafana version 13.0.5-r1 fixes 8 vulnerabilities: ghsa-r277-6w6q-xmqw, ghsa-jpcw-4wr7-c3vq, CVE-2026-21728, CVE-2026-28377, CVE-2026-42151...

CLEANSTART-2026-KB86475 Security fixes in grafana 13.1.0-r2

Package grafana version 13.1.0-r2 fixes 2 vulnerabilities: CVE-2026-28377, ghsa-ffqx-q65f-36jf...

CVE-2026-28377 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-28377 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

CVE-2026-28377 S3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern)

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to williamgoodfellow for reporting this vulnerability...