AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Grafana Labs security advisories

25 advisories · 10 critical or high in 12 months · latest Oct 27

Advisories page

25 advisories

Medium 6.5Oct 27Grafana: missing authorizationCVE-2026-16491no fix yetMedium 4.3Sep 30Grafana: information disclosureCVE-2026-13719fixed in 12.4.12 +2Medium 5.4Sep 30Grafana: improper authorizationCVE-2026-13720no fix yetMedium 5.3Sep 29Grafana: missing authorizationCVE-2026-81841no fix yetMedium 4.3Sep 29Grafana: improper authorizationCVE-2026-81842fixed in 12.4.12 +1High 7.3Sep 17Grafana: cross-site scriptingCVE-2026-76154no fix yetHigh 8.8Sep 17Grafana: remote code executionCVE-2026-15815no fix yetMedium 6.5Sep 2Grafana OSS: denial of serviceCVE-2026-19475no fix yetMedium 6.8Sep 2Grafana Enterprise: capture-replayCVE-2026-12704no fix yetHigh 7.1Sep 2Grafana: authentication bypassCVE-2026-14199no fix yetHigh 7.7Aug 27Grafana Labs Alloy: exposed filesCVE-2026-75889no fix yetMedium 6.1Aug 27Grafana Labs Clickhouse Datasource: cleartext transmissionCVE-2026-19854no fix yetMedium 6.3Aug 26Grafana: improper access controlCVE-2026-19197fixed in OSS 12.4.8 +2Medium 6.8Aug 24Grafana OSS: cross-site scriptingCVE-2026-17033no fix yetHigh 7.1Aug 19Grafana: improper authorizationCVE-2026-17183fixed in OSS 12.3.11 +3Medium 5.3Aug 17Grafana: information disclosureCVE-2026-11817no fix yetCritical 9.1Aug 11Grafana MCP Server: server-side request forgeryCVE-2026-19516no fix yetHigh 7.1Jul 24Grafana IRM: improper access controlCVE-2026-9765no fix yetMedium 5.3Jul 23Grafana OSS: resource exhaustionCVE-2026-21723no fix yetHigh 7.5Jul 16Grafana Labs Loki: resource exhaustionCVE-2026-21729fixed in v3.7.0High 8.6Jul 15Grafana MCP Server: server-side request forgeryCVE-2026-15583no fix yetMedium 6.8Jul 10Grafana OSS: cross-site scriptingCVE-2026-8595no fix yetMedium 5.3Jul 10Grafana OSS: denial of serviceCVE-2026-8609no fix yetHigh 7.5Jul 10Grafana OSS: resource exhaustionCVE-2026-33382no fix yetLow 3.1Jul 7Grafana: improper access controlCVE-2026-28378no fix yet
About Grafana Labs

Security advisories Grafana Labs publishes for its own products.

grafana.com/security/security-advisoriesGrafana Labs

Grafana Labs elsewhere on Ibis: Funding · Paydays · Releases · Repos