EUVD-2026-112198

A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression uncontrolled recursion. A user with permission to provision alert rules can make the outage persist across restarts...

CVE-2026-88858

A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression, leading to a denial of service via uncontrolled recursion . If a user also possesses permissions to provision alert rules, they can ensure the outage persists across restarts. This vul...