80 matches found
OPENSUSE-SU-2026:11332-1 grafana-12.4.5-3.1 on GA media
These are all security issues fixed in the grafana-12.4.5-3.1 package on the GA media of openSUSE Tumbleweed...
CLEANSTART-2026-IE49312 Security fixes for CVE-2026-21728, CVE-2026-2303, CVE-2026-28377, CVE-2026-42151, CVE-2026-44903, CVE-2026-48096, ghsa-8396-jffm-qx4w, ghsa-cp6g-7hqx-qxhp, ghsa-ffqx-q65f-36jf, ghsa-fw8g-cg8f-9j28, ghsa-p4r4-xvrq-gvmc, ghsa-w8rr-5gcm-pp58, ghsa-wg65-39gg-5wfj applied in versions: 12.2.10-r1
Multiple security vulnerabilities affect the grafana package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZZ38071 Security fixes for CVE-2026-21728, CVE-2026-2303, CVE-2026-28377, CVE-2026-42151, CVE-2026-44903, CVE-2026-48096, ghsa-8396-jffm-qx4w, ghsa-ffqx-q65f-36jf, ghsa-fw8g-cg8f-9j28, ghsa-p4r4-xvrq-gvmc, ghsa-w8rr-5gcm-pp58, ghsa-wg65-39gg-5wfj applied in versions: 12.2.10-r1
Multiple security vulnerabilities affect the grafana package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-CQP7-WF4C-3XGC vulnerabilities
Vulnerabilities for packages: grafana-fips...
CVE-2020-24303 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-VW7Q-P2QG-4M5F vulnerabilities
Vulnerabilities for packages: grafana-fips...
CVE-2022-39306 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-5699-PPR6-8H44 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-33381 vulnerabilities
Vulnerabilities for packages: grafana...
GHSA-29P4-5443-X453 vulnerabilities
Vulnerabilities for packages: grafana...
GHSA-5CV7-H7GR-WJGH vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-33377 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
GHSA-WFHV-MJ62-F5XH vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
GHSA-8MRJ-8PC8-39JM vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
CVE-2026-28379 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the sqlExpressions process. An attacker can access arbitrary files from the server's filesystem by sending crafted SQL expressions. This is only exploitable if the sqlExpressions feature toggle is enabled. Remediation...
Authorization Bypass Through User-Controlled Key
Overview github.com/grafana/grafana/pkg/api is an open and composable observability and data visualization platform. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the Snapshot API process. An attacker can remove dashboard snapshots without...
GHSA-57J5-QWP2-VQP6 vulnerabilities
Vulnerabilities for packages: grafana...