Approved changes feed: RSS · Atom

cpe:2.3:a:grafana:grafana:12.1.6:-:*:*:*:*:*:*

part: a version: 12.1.6 update: -

VendorGrafana (7564912d-bb81-50cf-9eb9-f573ac2fa519)
ProductGrafana (6e4f3e11-70ef-54b3-88d6-f64136c9d5f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/grafana/grafana purl2cpe 2026-06-01 10:14:45.465637
pkg:github/grafana/grafana purl2cpe 2026-06-01 10:14:45.465639
pkg:rpm/fedora/grafana purl2cpe 2026-06-01 10:14:45.465640
pkg:rpm/opensuse/grafana purl2cpe 2026-06-01 10:14:45.465642

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21722 vulnerable 2026-06-03 15:15:51.529965 Public Dashboards time range restriction on annotations can be bypassed
MEDIUM (5.3)
Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.
Published: 2026-02-12T08:49:05.678Z
Updated: 2026-05-13T19:28:33.822Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.