Approved changes feed: RSS · Atom
cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Grafana (7564912d-bb81-50cf-9eb9-f573ac2fa519) |
|---|---|
| Product | Grafana (6e4f3e11-70ef-54b3-88d6-f64136c9d5f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/grafana/grafana |
purl2cpe | 2026-06-01 10:14:45.236654 |
pkg:github/grafana/grafana |
purl2cpe | 2026-06-01 10:14:45.236656 |
pkg:rpm/fedora/grafana |
purl2cpe | 2026-06-01 10:14:45.236658 |
pkg:rpm/opensuse/grafana |
purl2cpe | 2026-06-01 10:14:45.236659 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-28376 |
vulnerable | 2026-06-08 07:55:15.219957 |
Grafana Live push endpoint allows unbounded memory allocation leading to OOM
MEDIUM (6.5)
The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.
Published: 2026-05-13T19:28:26.544Z
Updated: 2026-07-29T14:00:03.466Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28375 |
vulnerable | 2026-06-08 07:55:15.219401 |
Grafana Testdata datasource can issue unbounded memory allocations
MEDIUM (6.5)
A testdata data-source can be used to trigger out-of-memory crashes in Grafana.
Published: 2026-03-27T14:26:19.270Z
Updated: 2026-07-29T13:59:45.847Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27880 |
vulnerable | 2026-06-08 07:55:14.078730 |
OpenFeature evaluation API reads input data with no bounds
HIGH (7.5)
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
Published: 2026-03-27T14:12:20.075Z
Updated: 2026-07-29T14:00:24.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27879 |
vulnerable | 2026-06-08 07:55:14.078340 |
Query resampling can cause unbounded memory allocations
MEDIUM (6.5)
A resample query can be used to trigger out-of-memory crashes in Grafana.
Published: 2026-03-27T14:28:56.133Z
Updated: 2026-07-29T14:00:10.470Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27877 |
vulnerable | 2026-06-08 07:55:14.078044 |
Public dashboards discloses all direct mode datasources
MEDIUM (6.5)
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.
No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
Published: 2026-03-27T14:02:11.889Z
Updated: 2026-07-29T14:00:21.767Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27876 |
vulnerable | 2026-06-08 07:55:14.076032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21727 |
vulnerable | 2026-06-08 07:49:16.731732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21725 |
vulnerable | 2026-06-08 07:49:16.728736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21722 |
vulnerable | 2026-06-08 07:49:16.724543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21721 |
vulnerable | 2026-06-08 07:49:16.719617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6197 |
vulnerable | 2026-06-08 07:43:14.519210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6023 |
vulnerable | 2026-06-08 07:43:14.129787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4123 |
vulnerable | 2026-06-08 07:29:15.440889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41117 |
vulnerable | 2026-06-08 07:25:06.648208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3580 |
vulnerable | 2026-06-08 07:23:09.404773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3454 |
vulnerable | 2026-06-08 07:23:08.877913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3415 |
vulnerable | 2026-06-08 07:23:08.805343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3260 |
vulnerable | 2026-06-08 07:23:08.561540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2703 |
vulnerable | 2026-06-08 07:16:58.102447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1088 |
vulnerable | 2026-06-08 07:06:36.906478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12141 |
vulnerable | 2026-06-08 07:04:29.754905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9264 |
vulnerable | 2026-06-08 07:00:27.026380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8118 |
vulnerable | 2026-06-08 07:00:22.283015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6322 |
vulnerable | 2026-06-08 06:58:18.579408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1442 |
vulnerable | 2026-06-08 06:25:40.095347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1313 |
vulnerable | 2026-06-08 06:25:39.799102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11741 |
vulnerable | 2026-06-08 06:23:50.312538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10452 |
vulnerable | 2026-06-08 06:23:46.620100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6152 |
vulnerable | 2026-06-08 06:19:46.349470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5122 |
vulnerable | 2026-06-08 06:19:42.510536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3128 |
vulnerable | 2026-06-08 06:09:38.629125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2801 |
vulnerable | 2026-06-08 06:02:43.028198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2183 |
vulnerable | 2026-06-08 06:02:41.574440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22462 |
vulnerable | 2026-06-08 05:54:26.352301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1410 |
vulnerable | 2026-06-08 05:52:35.792677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1387 |
vulnerable | 2026-06-08 05:52:35.747582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0594 |
vulnerable | 2026-06-08 05:52:31.990406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0507 |
vulnerable | 2026-06-08 05:52:31.814865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39328 |
vulnerable | 2026-06-08 05:47:18.610749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39324 |
vulnerable | 2026-06-08 05:47:18.603973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39307 |
vulnerable | 2026-06-08 05:47:18.577082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39306 |
vulnerable | 2026-06-08 05:47:18.576680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39229 |
vulnerable | 2026-06-08 05:47:18.391749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39201 |
vulnerable | 2026-06-08 05:47:18.334436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36062 |
vulnerable | 2026-06-08 05:46:06.238286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35957 |
vulnerable | 2026-06-08 05:46:06.057579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31130 |
vulnerable | 2026-06-08 05:43:40.256222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31123 |
vulnerable | 2026-06-08 05:43:40.242918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31107 |
vulnerable | 2026-06-08 05:43:40.178660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31097 |
vulnerable | 2026-06-08 05:43:40.150863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29170 |
vulnerable | 2026-06-08 05:42:47.265335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26148 |
vulnerable | 2026-06-08 05:41:50.693140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24812 |
vulnerable | 2026-06-08 05:41:01.749671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23552 |
vulnerable | 2026-06-08 05:40:57.751301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23498 |
vulnerable | 2026-06-08 05:40:57.649856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21713 |
vulnerable | 2026-06-08 05:40:02.062675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21703 |
vulnerable | 2026-06-08 05:40:02.041049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21702 |
vulnerable | 2026-06-08 05:40:02.030322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21673 |
vulnerable | 2026-06-08 05:40:01.971018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43815 |
vulnerable | 2026-06-08 05:36:44.341584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43813 |
vulnerable | 2026-06-08 05:36:44.338168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43798 |
vulnerable | 2026-06-08 05:36:44.302635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41244 |
vulnerable | 2026-06-08 05:35:20.040973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41174 |
vulnerable | 2026-06-08 05:35:19.902851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39226 |
vulnerable | 2026-06-08 05:33:49.227576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27358 |
vulnerable | 2026-06-08 05:31:21.019889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24303 |
vulnerable | 2026-06-08 05:22:32.775698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13430 |
vulnerable | 2026-06-08 05:18:00.611293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13379 |
vulnerable | 2026-06-08 05:18:00.533131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12459 |
vulnerable | 2026-06-08 05:17:58.208121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12458 |
vulnerable | 2026-06-08 05:17:58.202805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12245 |
vulnerable | 2026-06-08 05:17:56.732360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12052 |
vulnerable | 2026-06-08 05:17:56.300048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11110 |
vulnerable | 2026-06-08 05:16:36.462004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19499 |
vulnerable | 2026-06-08 05:13:23.012508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15043 |
vulnerable | 2026-06-08 05:12:56.586340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13068 |
vulnerable | 2026-06-08 05:12:40.846193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19039 |
vulnerable | 2026-06-08 05:11:15.273311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15727 |
vulnerable | 2026-06-08 05:10:55.312985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12099 |
vulnerable | 2026-06-08 05:10:39.824739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.