Grafana -- Public dashboards discloses all direct mode datasources

https://grafana.com/security/security-advisories/cve-2026-27877 reports: When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-source...

CVE-2026-33945

creationtimestamp| type| source ---|---|--- 2026-03-26 23:59:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysrbvxdo2i 2026-03-27 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298196062602424 2026-03-27 00:00:44+00:00| seen|...

CVE-2026-33686

creationtimestamp| type| source ---|---|--- 2026-03-26 22:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn3ypzwa2x 2026-03-26 22:18:36+00:00| seen| https://bsky.app/profile/potato.software/post/3mhyn3zn4td2z 2026-03-26 22:56:19+00:00| seen|...

CVE-2026-33152

creationtimestamp| type| source ---|---|--- 2026-03-26 19:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116297133534658631 2026-03-26 19:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhydphpyav2b 2026-03-26 20:34:21+00:00| seen|...

CVE-2026-33530

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33530 2026-03-26 19:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfafsvbz2n 2026-03-26 21:01:09+00:00| seen|...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack when processing Git URL fragment subdir components. An attacker can access files outside the intended Git repository root by specifying a crafted subdir value in the URL fragment. Note: This is only exploitable if builds...

BuildKit Git URL subdir component can cause access to restricted files

Impact Insufficient validation of Git URL fragment subdir components :, docs may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. Patches The issue has been fixed in version v0.28.1 Workarounds The issue affects...

CVE-2026-33494

creationtimestamp| type| source ---|---|--- 2026-03-26 18:01:14+00:00| seen| https://infosec.exchange/users/offseq/statuses/116296782554333231 2026-03-26 18:01:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhy6pudmxi2j 2026-03-26 19:04:07+00:00| seen|...

CVE-2026-2931

creationtimestamp| type| source ---|---|--- 2026-03-26 05:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwu3lmmly27 2026-03-26 05:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwejqr3y25 2026-03-26 07:00:50+00:00| seen|...

CVE-2026-4840

creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4840 2026-03-26 05:18:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwu3eol3e2t 2026-03-26 06:00:32+00:00| seen|...

CVE-2026-28760

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:15+00:00| seen| https://jvn.jp/en/jp/JVN08057419/ 2026-03-26 07:19:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhx2uv3j7o2p 2026-03-26 09:00:30+00:00| seen|...

CVE-2026-33917

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfokbfmu2d 2026-03-26 01:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfpllrut2r 2026-03-28 12:00:16+00:00| seen|...

PT-2026-28526

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.28.1 Description Insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted...

CVE-2026-33661

creationtimestamp| type| source ---|---|--- 2026-03-25 19:30:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q938-ghwv-8gvc 2026-03-26 22:20:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn724yty2p 2026-03-26 23:06:19+00:00| seen|...

CVE-2026-4946

creationtimestamp| type| source ---|---|--- 2026-03-25 16:55:00+00:00| seen| http://takeonme.org/cves/cve-2026-4946/ 2026-03-29 20:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7xsulyfj2t 2026-03-29 21:00:31+00:00| seen|...

CVE-2025-15517

creationtimestamp| type| source ---|---|--- 2026-03-25 16:09:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhvhy2gdiot2 2026-03-25 16:40:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mhvjqeeaau2i 2026-03-26...

CVE-2026-34036

creationtimestamp| type| source ---|---|--- 2026-03-25 13:49:24+00:00| published-proof-of-concept| https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r 2026-03-31 23:00:10+00:00| published-proof-of-concept| Telegram/P0Q0ZCX8Ywjq9vjEgqv2AzrjbsHPHPXVA5rNa0Ss-R1H3I 2026-04-01...

Security update for grafana

This update for grafana fixes the following issues: Security issues fixed: CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled bsc1258136 CVE-2026-21721: Fixed access control by the dashboard permissions API bsc1257337 CVE-2026-21720: Fixed...

CVE-2026-3608

creationtimestamp| type| source ---|---|--- 2026-03-25 09:52:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhuswle4j72z 2026-03-25 10:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhuteuaw7t2i 2026-03-25 10:30:32+00:00| seen|...

CVE-2026-2072

creationtimestamp| type| source ---|---|--- 2026-03-25 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116287932364387625 2026-03-25 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhuaxb5hob2i 2026-03-25 06:05:07+00:00| seen|...