SUSE CVE-2026-21723

The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...

PT-2026-63565

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description The alertmanager templates test endpoint '/api/alertmanager/grafana/config/api/v1/templates/test' allows the execution of templates without memory limits. Sending a large volume of template...

EUVD-2026-42921

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance denial of service...