CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-27877 Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-27877 Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-27877 Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-27877

CVE-2026-27877 affects Grafana where, when using public dashboards with direct data-sources, passwords for those data-sources are exposed. The root cause is direct data-source password handling leaking in such dashboards. The advisory recommends converting direct data-sources to proxied data-sour...

CVE-2026-33748 BuildKit Git URL subdir component can cause access to restricted files

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-33748

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-33748

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-33748

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-33748 BuildKit Git URL subdir component can cause access to restricted files

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-34243

creationtimestamp| type| source ---|---|--- 2026-03-27 12:52:58+00:00| published-proof-of-concept| https://github.com/njzjz/wenxian/security/advisories/GHSA-r4fj-r33x-8v88 2026-03-31 16:28:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mieluuzr2r2c 2026-03-31...

CVE-2026-27858

creationtimestamp| type| source ---|---|--- 2026-03-27 09:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116300319602682921 2026-03-27 09:00:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhzqyd3ezr2r 2026-03-27 11:16:46+00:00| seen|...

CVE-2026-4908

creationtimestamp| type| source ---|---|--- 2026-03-27 04:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhzahqhxyx24 2026-03-27 05:02:51+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhzdovd6w72z 2026-03-27 05:15:30+00:00| published-proof-of-concept|...

CVE-2026-33725

creationtimestamp| type| source ---|---|--- 2026-03-27 03:17:50+00:00| published-proof-of-concept| Telegram/GblWBcVIPYIrXGBoPy7bAM0O64UdRepvGT6caCd3l3fA 2026-04-24 08:31:48+00:00| published-proof-of-concept| Telegram/LtB9Y94c6PJKjHswsiVaIiSzQ94DvfwAx2TFj5qjA9N4fg 2026-04-24 08:31:50+00:00|...

CVE-2026-33701

creationtimestamp| type| source ---|---|--- 2026-03-27 02:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhz4bjog5422 2026-03-27 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298903055981699 2026-03-27 03:00:32+00:00| seen|...

CVE-2026-33728

creationtimestamp| type| source ---|---|--- 2026-03-27 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhyxta3ux52y 2026-03-27 01:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298549180324287 2026-03-27 03:05:08+00:00| seen|...

CVE-2026-33697

creationtimestamp| type| source ---|---|--- 2026-03-27 01:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw4nni6v2s 2026-03-27 01:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw5dztap2m 2026-03-27 01:18:53+00:00| seen|...

CVE-2026-33898

creationtimestamp| type| source ---|---|--- 2026-03-27 00:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysuuob4v2n 2026-03-27 01:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw4vmu3g2w 2026-03-27 01:00:34+00:00| seen|...

Grafana 安全漏洞

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has security vulnerabilities; these vulnerabilities arise from...

PT-2026-28370

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description When using public dashboards and direct data-sources, passwords for direct data-sources are exposed even if they are not actively used in dashboards. Passwords for proxied data-sources are n...