Grafana — свободная программная система визуализации данных, ориентированная на данные систем ИТ-мониторинга.
Релизный цикл, информация об уязвимостях
График релизов
Количество 574
GHSA-4368-7mjc-5763
A resample query can be used to trigger out-of-memory crashes in Grafana.
GHSA-3q27-7qjq-p9c5
Grafana public dashboards disclose all direct mode datasources
GHSA-jmfj-8gxc-cg8c
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
GHSA-mp76-5xhh-vxvc
A testdata data-source can be used to trigger out-of-memory crashes in Grafana.
GHSA-736h-475m-xhjc
A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always recommended to update to avoid future attack vectors going this path. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
CVE-2026-28375
A testdata data-source can be used to trigger out-of-memory crashes in Grafana.
CVE-2026-28375
A testdata data-source can be used to trigger out-of-memory crashes in ...
CVE-2026-27880
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
CVE-2026-27880
The OpenFeature feature toggle evaluation endpoint reads unbounded val ...
CVE-2026-27879
A resample query can be used to trigger out-of-memory crashes in Grafana.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-4368-7mjc-5763 A resample query can be used to trigger out-of-memory crashes in Grafana. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| GHSA-3q27-7qjq-p9c5 Grafana public dashboards disclose all direct mode datasources | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| GHSA-jmfj-8gxc-cg8c The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| GHSA-mp76-5xhh-vxvc A testdata data-source can be used to trigger out-of-memory crashes in Grafana. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| GHSA-736h-475m-xhjc A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always recommended to update to avoid future attack vectors going this path. Only instances with the sqlExpressions feature toggle enabled are vulnerable. | CVSS3: 9.1 | 2% Низкий | 4 месяца назад |
 | CVE-2026-28375 A testdata data-source can be used to trigger out-of-memory crashes in Grafana. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-28375 A testdata data-source can be used to trigger out-of-memory crashes in ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-27880 The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-27880 The OpenFeature feature toggle evaluation endpoint reads unbounded val ... | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-27879 A resample query can be used to trigger out-of-memory crashes in Grafana. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу