4 matches found
SUSE SLES15 Security Update : grafana, system-user-grafana (SUSE-SU-2026:4600-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4600-1 advisory. - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials...
OPENSUSE-SU-2026:22125-1 Security update for grafana
This update for grafana fixes the following issues: Changes in grafana: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...
CVE-2026-64657: Improper Neutralization of Special Elements used in an SQL Command
Budibase is an open-source low-code platform. Prior to 3.39.19, the PostgreSQL datasource connector in packages/server/src/integrations/postgres.ts interpolates the user-controlled schema configuration field into a SET searchpath statement without escaping embedded double quotes, allowing an...
Appsmiths SQL Query autocomplete renderer contains a cross site scripting vulnerability
Overview A stored cross-site scripting XSS vulnerability has been discovered in Appsmith, specifically in the CodeMirror based SQL query editor’s autocomplete renderer. CVE-2026-7299 has been assigned to track the vulnerability. An attacker with developer level access to a shared PostgreSQL...