984 matches found
CVE-2026-27877 Public dashboards discloses all direct mode datasources
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...
CVE-2026-27877
CVE-2026-27877 affects Grafana where, when using public dashboards with direct data-sources, passwords for those data-sources are exposed. The root cause is direct data-source password handling leaking in such dashboards. The advisory recommends converting direct data-sources to proxied data-sour...
Grafana 安全漏洞
Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has security vulnerabilities; these vulnerabilities arise from...
PT-2026-28370
Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description When using public dashboards and direct data-sources, passwords for direct data-sources are exposed even if they are not actively used in dashboards. Passwords for proxied data-sources are n...
Home Assistant 跨站脚本漏洞
Home Assistant is an open-source family automation management system developed by Home Assistant. This system is primarily used to control household automation devices. In versions of Home Assistant from 2020.02 to 2026.01, there was a cross-site scripting vulnerability. This vulnerability occurr...
Grafana -- Public dashboards discloses all direct mode datasources
https://grafana.com/security/security-advisories/cve-2026-27877 reports: When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-source...
Security update for grafana
This update for grafana fixes the following issues: Security issues fixed: CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled bsc1258136 CVE-2026-21721: Fixed access control by the dashboard permissions API bsc1257337 CVE-2026-21720: Fixed...
GHSA-7X6V-J9X4-QF24 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-31898 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-WFV2-PWC8-CRG5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-31938 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-31898 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
GHSA-WFV2-PWC8-CRG5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
GHSA-7X6V-J9X4-QF24 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-31938 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
PT-2026-26303
Name of the Vulnerable Software and Affected Versions Salvo versions 0.39.0 through 0.89.2 Description Salvo, a Rust web framework, contains a Path Traversal and Access Control Bypass issue within its salvo-proxy component. An unauthenticated attacker can bypass proxy routing constraints and acce...
GHSA-9PPJ-QMQM-Q256 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, renovate, kubeflow-centraldashboard, saf, sqlpad, tileserver-gl, py3-jupyterlab, pulumi, node-gyp, lerna, pnpm-stage0...
CVE-2026-31802 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, renovate, kubeflow-centraldashboard, saf, sqlpad, tileserver-gl, py3-jupyterlab, pulumi, node-gyp, lerna, pnpm-stage0...