Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources.Oct 15, 2026
- UnknownImportant: grafana security updateOct 15, 2026
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.EPSS 0.6%Aug 24, 2026
- Medium5.4The grafanacubism-panel plugin allows use of cubism.js in Grafana.Mar 11, 2026
- Low2.0A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so.Feb 25, 2026
- High7.5Grafana Path Traversal VulnerabilityKEVEPSS 88.5%Dec 7, 2021
- High7.3Grafana Authentication Bypass VulnerabilityKEVEPSS 99.9%Oct 5, 2021
7 records · page 1 of 1
PreviousNext