Grafana Labs security advisories
20 advisories · 10 critical or high in 12 months · latest Sep 17
20 advisories
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 17 | Grafana: cross-site scripting | High7.3 | No fix yet |
| Sep 17 | Grafana: remote code execution | High8.8 | No fix yet |
| Sep 2 | Grafana OSS: denial of service | Medium6.5 | No fix yet |
| Sep 2 | Grafana Enterprise: capture-replay | Medium6.8 | No fix yet |
| Sep 2 | Grafana: authentication bypass | High7.1 | No fix yet |
| Aug 27 | Grafana Labs Alloy: exposed files | High7.7 | No fix yet |
| Aug 27 | Grafana Labs Clickhouse Datasource: cleartext transmission | Medium6.1 | No fix yet |
| Aug 26 | Grafana: improper access control | Medium6.3 | OSS 12.4.8+2 more |
| Aug 24 | Grafana OSS: cross-site scripting | Medium6.8 | No fix yet |
| Aug 19 | Grafana: improper authorization | High7.1 | OSS 12.3.11+3 more |
| Aug 17 | Grafana: information disclosure | Medium5.3 | No fix yet |
| Aug 11 | Grafana MCP Server: server-side request forgery | Critical9.1 | No fix yet |
| Jul 24 | Grafana IRM: improper access control | High7.1 | No fix yet |
| Jul 23 | Grafana OSS: resource exhaustion | Medium5.3 | No fix yet |
| Jul 16 | Grafana Labs Loki: resource exhaustion | High7.5 | v3.7.0 |
| Jul 15 | Grafana MCP Server: server-side request forgery | High8.6 | No fix yet |
| Jul 10 | Grafana OSS: cross-site scripting | Medium6.8 | No fix yet |
| Jul 10 | Grafana OSS: denial of service | Medium5.3 | No fix yet |
| Jul 10 | Grafana OSS: resource exhaustion | High7.5 | No fix yet |
| Jul 7 | Grafana: improper access control | Low3.1 | No fix yet |