1151 matches found
MAL-2025-23198 Malicious code in infinity-aspen-ikd431-project (npm)
The package infinity-aspen-ikd431-project was found to contain malicious code...
MAL-2025-33821 Malicious code in spruce-infinity-qym565-project (npm)
The package spruce-infinity-qym565-project was found to contain malicious code...
MAL-2025-23200 Malicious code in infinity-lightning-lij114-project (npm)
The package infinity-lightning-lij114-project was found to contain malicious code...
MAL-2025-24610 Malicious code in kiwi-infinity-xlz814-project (npm)
The package kiwi-infinity-xlz814-project was found to contain malicious code...
MAL-2025-24555 Malicious code in kite-infinity-lub379-project (npm)
The package kite-infinity-lub379-project was found to contain malicious code...
MAL-2025-23203 Malicious code in infinity-river-xpr242-project (npm)
The package infinity-river-xpr242-project was found to contain malicious code...
Malicious code in lagoon-infinity-iyv611-project (npm)
The package lagoon-infinity-iyv611-project was found to contain malicious code...
MAL-2025-24902 Malicious code in lagoon-infinity-iyv611-project (npm)
The package lagoon-infinity-iyv611-project was found to contain malicious code...
MAL-2025-23205 Malicious code in infinity-umbrella-dfb436-project (npm)
The package infinity-umbrella-dfb436-project was found to contain malicious code...
MAL-2025-23211 Malicious code in infinity_jbre7_244gf_molecule (npm)
The package infinityjbre7244gfmolecule was found to contain malicious code...
MAL-2025-38424 Malicious code in violet-infinity-qzv171-project (npm)
The package violet-infinity-qzv171-project was found to contain malicious code...
SUSE CVE-2025-8341
Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...
GO-2025-3843 Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource
Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource...
Grafana Visualization Plugin Server Request Manipulation Unauthorized Access
The vulnerability of the Infinity Datasource plugin for the Grafana monitoring and observation platform relates to server-side request manipulation. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2025-8341
A flaw was found in github.com/grafana/grafana-infinity-datasource. The Infinity datasource plugin incorrectly handles configuration when restricted to certain data sources, allowing an attacker to potentially trigger an out-of-bounds read. This vulnerability allows a remote attacker to manipulat...
Grafana Infinity Datasource Plugin SSRF Vulnerability
Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL validation process. An attacker can access internal or otherwise restricted resources by submitting a specially crafted URL that bypasses configured allowlists. Remediation Upgrade...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL validation process. An attacker can access internal or otherwise restricted resources by submitting a specially crafted URL that bypasses configured allowlists. Remediation Upgrade...
GHSA-3C93-92R7-J934 Grafana Infinity Datasource Plugin SSRF Vulnerability
Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...
CVE-2025-8341
Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...