CVE-2026-97394 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

GHSA-P6WJ-QRR4-PGH5 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CLEANSTART-2026-MC29038 Security fix for GHSA-hrxh-6v49-42gf applied in: temporal-server 1.30.8-r1, grafana-fips 13.1.0-r1, temporal-server-fips 1.31.4-r1, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, openbao 2.6.1-r0, external-dns 0.20.0-r3, kube-state-metrics 2.20.0-r4

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EH09681 Security fix for GHSA-gcjh-h69q-9w9g applied in: grafana-fips 13.1.0-r1, istio-pilot-discovery 1.29.8-r1, istio-pilot-discovery 1.30.1-r1, openbao 2.6.1-r1

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PN08299 Security fix for GHSA-vffh-x6r8-xx99 applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZP66178 Security fix for GHSA-w8rr-5gcm-pp58 applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WN62977 Security fix for GHSA-497x-rrr9-68jp applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ED54467 Security fix for GHSA-pjcq-xvwq-hhpj applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IC77514 Security fix for GHSA-mpwr-8vm7-h73f applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV65600 Security fix for GHSA-jpcw-4wr7-c3vq applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YF58790 Security fix for GHSA-r277-6w6q-xmqw applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YO15719 OpenFGA is an authorization/permission engine built for developers

Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers...

CLEANSTART-2026-IC81129 OpenFGA is an authorization/permission engine built for developers

Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers...

CLEANSTART-2026-RC76229 OpenFGA is an authorization/permission engine built for developers

Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers...

CLEANSTART-2026-OZ34344 Security fix for GHSA-8396-jffm-qx4w applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IY19644 Security fix for GHSA-cf98-j28v-49v6 applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RF10343 Security fix for GHSA-hcxc-wf8j-23hv applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IH60054 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...

Security vulnerability affects the grafana-fips package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...

CLEANSTART-2026-CP99296 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LM45189 Security fix for GHSA-ffqx-q65f-36jf applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...