GO-2026-5095 Grafana public dashboards disclose all direct mode datasources in github.com/grafana/grafana

Grafana public dashboards disclose all direct mode datasources in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

CVE-2026-44974 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-36HH-X5P5-JGC8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CMWH-PVXP-8882 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse-fips, langfuse, wazuh-dashboard, wazuh-dashboard-fips...

CVE-2026-56213 Capgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC

Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsertversionmeta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthenticated attackers to insert arbitrary rows into versionmeta for any appid. Attackers can exploit this by calling the RPC...

EUVD-2026-36641

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName...

GHSA-VXR8-FQ34-VVX9 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, langfuse, wazuh-dashboard, kibana, wazuh-dashboard-fips...

GHSA-7C78-JF6Q-G5CM vulnerabilities

Vulnerabilities for packages: vitess, prism, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard, saf, pulumi, wazuh-dashboard-fips, lerna...

CVE-2026-49982 vulnerabilities

Vulnerabilities for packages: vitess, prism, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard, saf, pulumi, wazuh-dashboard-fips, lerna...

GHSA-VXR8-FQ34-VVX9 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards...

GHSA-7C78-JF6Q-G5CM vulnerabilities

Vulnerabilities for packages: pulumi, vitess, opensearch-dashboards, prism, saf, lerna...

CVE-2026-49982 vulnerabilities

Vulnerabilities for packages: pulumi, vitess, opensearch-dashboards, prism, saf, lerna...

CVE-2026-11769

We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templatin...

CVE-2026-11769 Operator - Namespaced User Path Traversal

We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templatin...

CVE-2026-11769

Grafana Operator CVE-2026-11769 affects all versions

GHSA-777C-7FJR-54VF vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-44487 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-J5F8-GRM9-P9FC vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-44495 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-3G43-6GMG-66JW vulnerabilities

Vulnerabilities for packages: nextcloud-server...