34 matches found
ff4j__ff4j_CVE-2022-44262_1-8-13
✨✨✨ FF4J - Java向けフィーチャートグル ✨✨✨ Codacy Badge FF4j は、フィーチャートグル パターンの実装です。 🤘特徴 フィーチャートグル: デプロイなしで、実行時にフィーチャーを有効化・無効化できます。コード内では、動的な述語（if/then/else）によって保護された複数のパスを実装します。 ロールベースのトグル: フラグ値だけでなく、ロールやグループ（カナリアリリース）によるアクセス制御も行えます。Spring Security をはじめとするさまざまなフレームワークに対応しています。 ストラテジーベースのトグル:...
ff4j__ff4j_CVE-2022-44262_1_8_13_fixed
✨✨✨ FF4J - Java向けフィーチャーフリッピング ✨✨✨ Codacy Badge FF4j は、フィーチャートグルパターンの実装です。 🤘 特徴 フィーチャートグル: デプロイなしで実行時に機能を有効化・無効化できます。コード内では、動的述語（if/then/else）で保護された複数のパスを実装します。 ロールベースのトグル: フラグ値だけで機能を有効化するだけでなく、ロールやグループ（カナリアリリース）でアクセスを制御できます。Spring Security をはじめとするさまざまなフレームワークに対応しています。 ストラテジーベースのトグル:...
PYSEC-2026-2768 Open WebUI has an Indirect Object Reference (IDOR) in user notes
Summary The API /api/v1/notes/noteid endpoint lacks proper authorization checks, allowing authenticated users to retrieve notes belonging to other users by guessing or enumerating UUIDs. This results in unauthorized disclosure of potentially sensitive or private user data. Details - if notes is...
CVE-2026-33380
A flaw was found in Grafana. An authenticated attacker can exploit a vulnerability in SQL Expressions to read arbitrary files from the Grafana server's filesystem. This information disclosure is possible only when the sqlExpressions feature toggle is enabled...
BIT-GRAFANA-2026-33380 SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
EUVD-2026-30145
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
GHSA-GXCP-JJXH-RWP4 Grafana: SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
CVE-2026-33380
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
CVE-2026-33380
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
UBUNTU-CVE-2026-33380
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
CVE-2026-33380
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
CVE-2026-33380 SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
CVE-2026-33380 SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
CVE-2026-33380 SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server’s filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...
BIT-GRAFANA-2026-27880 OpenFeature evaluation API reads input data with no bounds
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes...
SUSE CVE-2026-27876
A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact RCE. This is enabled by a feature in Grafana OSS, so all users are always recommended to update to avoid future attack vectors going this path. Only instances with the...
CVE-2026-27880
A flaw was found in Grafana. A remote attacker can exploit the feature toggle evaluation endpoint by sending unbounded values, causing the system to read excessive data into memory. This can lead to out-of-memory crashes, resulting in a Denial of Service DoS for the affected service. Mitigation...