SUSE CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

SUSE CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

SUSE CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

CVE-2026-28375

A flaw was found in Grafana. A remote attacker with low privileges could exploit this vulnerability by using a specially crafted testdata data-source. This could trigger out-of-memory crashes, leading to a Denial of Service DoS. Mitigation Mitigation for this issue is either not available or the...

EUVD-2026-16638

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

Exposure of Private Personal Information to an Unauthorized Actor

Overview github.com/grafana/grafana/pkg/api is an open and composable observability and data visualization platform. Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor in the public dashboards. An attacker can obtain sensitive...

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

UBUNTU-CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

Allocation of Resources Without Limits or Throttling

Overview github.com/grafana/grafana/pkg/tsdb is a developer testing tool for Grafana. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the testdata data-source. An attacker can cause the application to crash and become unavailable by...

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-28375 Grafana Testdata datasource can issue unbounded memory allocations

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-28375

CVE-2026-28375 affects Grafana via the testdata data-source, where a flaw permits unbounded memory allocations, leading to out-of-memory crashes. The connected CVE entry confirms the root cause as unbounded allocations by the testdata data-source, resulting in availability impact (OOM) . The prov...

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

Grafana 安全漏洞

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has a security vulnerability that can lead to a memory insufficiency...

PT-2026-28379

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.14+security01-1.1 Description A testdata data-source can be used to trigger out-of-memory crashes. Recommendations Update to version 11.6.14+security01-1.1...

CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

CVE-2026-33375 Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

CVE-2026-33375 Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...