AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Grafana Labs security advisories

30 advisories across Loki, Tempo, Grafana Labs

Company profile
Medium 6.5Oct 27Grafana: missing authorizationGrafanaCVE-2026-16491no fix yetMedium 4.3Sep 30Grafana: information disclosureGrafanaCVE-2026-13719fixed in 12.4.12 +2Medium 5.4Sep 30Grafana: improper authorizationGrafanaCVE-2026-13720no fix yetMedium 5.3Sep 29Grafana: missing authorizationGrafanaCVE-2026-81841no fix yetMedium 4.3Sep 29Grafana: improper authorizationGrafanaCVE-2026-81842fixed in 12.4.12 +1High 7.3Sep 17Grafana: cross-site scriptingGrafanaCVE-2026-76154no fix yetHigh 8.8Sep 17Grafana: remote code executionGrafanaCVE-2026-15815no fix yetMedium 6.5Sep 2Grafana OSS: denial of serviceGrafana OSSCVE-2026-19475no fix yetMedium 6.8Sep 2Grafana Enterprise: capture-replayGrafana EnterpriseCVE-2026-12704no fix yetHigh 7.1Sep 2Grafana: authentication bypassGrafanaCVE-2026-14199no fix yetHigh 7.7Aug 27Grafana Labs Alloy: exposed filesAlloyCVE-2026-75889no fix yetMedium 6.1Aug 27Grafana Labs Clickhouse Datasource: cleartext transmissionClickhouse DatasourceCVE-2026-19854no fix yetMedium 6.3Aug 26Grafana: improper access controlGrafanaCVE-2026-19197fixed in OSS 12.4.8 +2Medium 6.8Aug 24Grafana OSS: cross-site scriptingGrafana OSSCVE-2026-17033no fix yetHigh 7.1Aug 19Grafana: improper authorizationGrafanaCVE-2026-17183fixed in OSS 12.3.11 +3Medium 5.3Aug 17Grafana: information disclosureGrafanaCVE-2026-11817no fix yetCritical 9.1Aug 11Grafana MCP Server: server-side request forgeryGrafana MCP ServerCVE-2026-19516no fix yetHigh 7.1Jul 24Grafana IRM: improper access controlGrafana IRMCVE-2026-9765no fix yetMedium 5.3Jul 23Grafana OSS: resource exhaustionGrafana OSSCVE-2026-21723no fix yetHigh 7.5Jul 16Grafana Labs Loki: resource exhaustionLokiCVE-2026-21729fixed in v3.7.0High 8.6Jul 15Grafana MCP Server: server-side request forgeryGrafana MCP ServerCVE-2026-15583no fix yetMedium 6.8Jul 10Grafana OSS: cross-site scriptingGrafana OSSCVE-2026-8595no fix yetMedium 5.3Jul 10Grafana OSS: denial of serviceGrafana OSSCVE-2026-8609no fix yetHigh 7.5Jul 10Grafana OSS: resource exhaustionGrafana OSSCVE-2026-33382no fix yetLow 3.1Jul 7Grafana: improper access controlGrafanaCVE-2026-28378no fix yetMedium 5.3Jun 25Grafana Loki Path Traversal - CVE-2021-36156 Bypass in github.com/grafana/lokiLokiCVE-2026-21726no fix yetMedium 6.5Jun 19Grafana Tempo vulnerable to an out-of-memory crashTempoCVE-2026-27878fixed in 1.5.1-0.20260303204923-b13f74291d48High 7.5Apr 24Grafana Tempo has an Uncontrolled Resource Consumption issueTempoCVE-2026-21728fixed in 2.8.4 +2High 7.5Mar 27Grafana Tempo has Inadequate Encryption StrengthTempoCVE-2026-28377fixed in 2.10.3Medium 5.3Sep 2, 2021Path traversal in Grafana LokiLokiCVE-2021-36156fixed in 2.3.0
About Grafana Labs

Elsewhere on Ibis: Funding · Paydays · Releases · Repos