Grafana Labs security advisories
25 advisories across Loki, Tempo, Grafana Labs
| Date | Advisory | Product | Severity | Fixed in |
|---|---|---|---|---|
| Sep 17 | Grafana: cross-site scripting | Grafana | High7.3 | No fix yet |
| Sep 17 | Grafana: remote code execution | Grafana | High8.8 | No fix yet |
| Sep 2 | Grafana OSS: denial of service | Grafana OSS | Medium6.5 | No fix yet |
| Sep 2 | Grafana Enterprise: capture-replay | Grafana Enterprise | Medium6.8 | No fix yet |
| Sep 2 | Grafana: authentication bypass | Grafana | High7.1 | No fix yet |
| Aug 27 | Grafana Labs Alloy: exposed files | Alloy | High7.7 | No fix yet |
| Aug 27 | Grafana Labs Clickhouse Datasource: cleartext transmission | Clickhouse Datasource | Medium6.1 | No fix yet |
| Aug 26 | Grafana: improper access control | Grafana | Medium6.3 | OSS 12.4.8+2 more |
| Aug 24 | Grafana OSS: cross-site scripting | Grafana OSS | Medium6.8 | No fix yet |
| Aug 19 | Grafana: improper authorization | Grafana | High7.1 | OSS 12.3.11+3 more |
| Aug 17 | Grafana: information disclosure | Grafana | Medium5.3 | No fix yet |
| Aug 11 | Grafana MCP Server: server-side request forgery | Grafana MCP Server | Critical9.1 | No fix yet |
| Jul 24 | Grafana IRM: improper access control | Grafana IRM | High7.1 | No fix yet |
| Jul 23 | Grafana OSS: resource exhaustion | Grafana OSS | Medium5.3 | No fix yet |
| Jul 16 | Grafana Labs Loki: resource exhaustion | Loki | High7.5 | v3.7.0 |
| Jul 15 | Grafana MCP Server: server-side request forgery | Grafana MCP Server | High8.6 | No fix yet |
| Jul 10 | Grafana OSS: cross-site scripting | Grafana OSS | Medium6.8 | No fix yet |
| Jul 10 | Grafana OSS: denial of service | Grafana OSS | Medium5.3 | No fix yet |
| Jul 10 | Grafana OSS: resource exhaustion | Grafana OSS | High7.5 | No fix yet |
| Jul 7 | Grafana: improper access control | Grafana | Low3.1 | No fix yet |
| Jun 25 | Grafana Loki Path Traversal - CVE-2021-36156 Bypass in github.com/grafana/loki LokiMedium5.3Jun 25 | Loki | Medium5.3 | No fix yet |
| Jun 19 | Grafana Tempo vulnerable to an out-of-memory crashTempoMedium6.5Jun 19 | Tempo | Medium6.5 | 1.5.1-0.20260303204923-b13f74291d48 |
| Apr 24 | Grafana Tempo has an Uncontrolled Resource Consumption issueTempoHigh7.5Apr 24 | Tempo | High7.5 | 2.8.4+2 more |
| Mar 27 | Grafana Tempo has Inadequate Encryption StrengthTempoHigh7.5Mar 27 | Tempo | High7.5 | 2.10.3 |
| Sep 22021 | Path traversal in Grafana LokiLokiMedium5.3Sep 2, 2021 | Loki | Medium5.3 | 2.3.0 |