981 matches found
ALSA-2026:10226 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Information disclosure of data-source passwords via public dashboards CVE-2026-27877 For more details about the security issues, including the impact, a...
ALSA-2026:10223 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Information disclosure of data-source passwords via public dashboards CVE-2026-27877 For more details about the security issues, including the impact, a...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
GHSA-JG4P-7FHP-P32P vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-35213 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-JVFF-X2QM-6286 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-JVFF-X2QM-6286 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, librechat, opensearch-dashboards-fips...
GHSA-JG4P-7FHP-P32P vulnerabilities
Vulnerabilities for packages: kibana, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips...
CVE-2026-35213 vulnerabilities
Vulnerabilities for packages: kibana, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips...
BIT-GITLAB-2026-4332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due...
Linux Distros Unpatched Vulnerability : CVE-2026-3466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 EOL, Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0...
PT-2026-32416
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due...
GHSA-M4PR-4J3G-9V7V vulnerabilities
Vulnerabilities for packages: emissary, opencost, etcd, osv-scanner, terraform-provider-tls-fips, syncthing-fips, cluster-proportional-autoscaler, rke2-cloud-provider-fips, syncthing, crossplane-provider-aws-ssm, k9s-fips, amazon-eks-ami, aws-nuke, dex, omnibump, hugo-extended, prometheus-adapter...
RLSA-2026:6388 Important: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For...
EUVD-2026-20800
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due...
CVE-2026-4332
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due...
UBUNTU-CVE-2026-4332
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due...
CVE-2026-4332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due...
CVE-2026-4332
GitLab Enterprise Edition is affected by CVE-2026-4332 in customizable analytics dashboards where an authenticated user could inject and execute arbitrary JavaScript in other users’ browsers due to improper input sanitization. Affected ranges are GitLab EE versions: 18.2 up to but not including 1...
