Grafana -- Public dashboards discloses all direct mode datasources

https://grafana.com/security/security-advisories/cve-2026-27877 reports: When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-source...

Security update for grafana

This update for grafana fixes the following issues: Security issues fixed: CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled bsc1258136 CVE-2026-21721: Fixed access control by the dashboard permissions API bsc1257337 CVE-2026-21720: Fixed...

GHSA-7X6V-J9X4-QF24 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-WFV2-PWC8-CRG5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-31898 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-31938 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-WFV2-PWC8-CRG5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-7X6V-J9X4-QF24 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-31938 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-31898 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

PT-2026-26303

Name of the Vulnerable Software and Affected Versions Salvo versions 0.39.0 through 0.89.2 Description Salvo, a Rust web framework, contains a Path Traversal and Access Control Bypass issue within its salvo-proxy component. An unauthenticated attacker can bypass proxy routing constraints and acce...

GHSA-9PPJ-QMQM-Q256 vulnerabilities

Vulnerabilities for packages: renovate, tileserver-gl, py3-jupyterlab, pulumi, pnpm-stage0, lerna, node-gyp, saf, kubeflow-katib, kubeflow-centraldashboard, sqlpad...

CVE-2026-31802 vulnerabilities

Vulnerabilities for packages: renovate, tileserver-gl, py3-jupyterlab, pulumi, pnpm-stage0, lerna, node-gyp, saf, kubeflow-katib, kubeflow-centraldashboard, sqlpad...

CVE-2026-30827 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-46WH-PXPV-Q5GQ vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-V8W9-8MX6-G223 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-30827 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, langfuse-fips, kibana, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips...

GHSA-9PPJ-QMQM-Q256 vulnerabilities

Vulnerabilities for packages: graalvm, opensearch-dashboards, gitlab-rails-ce, lerna, pnpm-stage0, wazuh-dashboard-fips, actions-runner, saf, node-gyp, pulumi, tensorflow-cpu-jupyter, kibana, wazuh-dashboard, tileserver-gl, kubeflow-katib, sqlpad, gitlab-rails-ce-fips, py3-jupyterlab,...

GHSA-V8W9-8MX6-G223 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, langfuse-fips, kibana, librechat, opensearch-dashboards-fips...

CVE-2026-31802 vulnerabilities

Vulnerabilities for packages: graalvm, opensearch-dashboards, gitlab-rails-ce, lerna, pnpm-stage0, wazuh-dashboard-fips, actions-runner, saf, node-gyp, pulumi, tensorflow-cpu-jupyter, kibana, wazuh-dashboard, tileserver-gl, kubeflow-katib, sqlpad, gitlab-rails-ce-fips, py3-jupyterlab,...