Grafana — свободная программная система визуализации данных, ориентированная на данные систем ИТ-мониторинга.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 11.6.16 | 11.6.16 | ||
| 11.6.15 | 11.6.15 | ||
| 11.6.14 | 11.6.14+security-04 | ||
| 11.6.14 | 11.6.14+security-01 | ||
| 11.6.14 | 11.6.14 | ||
| 11.6.13 | 11.6.13 | ||
| 11.6.12 | 11.6.12 | ||
| 11.6.11 | 11.6.11 | ||
| 11.6.10 | 11.6.10+security-01 | ||
| 11.6.10 | 11.6.10 |
Показывать по
Количество 602
CVE-2026-28376
The Grafana Live push endpoint can be exploited to cause unbounded mem ...
CVE-2026-28383
A request to the Grafana plugin resources endpoint can cause unbounded ...
CVE-2026-28380
Any Editor could delete any snapshot, even if they have no access to r ...
CVE-2026-33380
A vulnerability in SQL Expressions allows an authenticated attacker to ...
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin ...
CVE-2026-33381
When a user's access to mint tokens for a service account is revoked, ...
CVE-2026-33376
When using an IPv6 allow-list for the Auth Proxy feature, it defaults ...
CVE-2026-33378
Using the $__timeGroup macro, one can achieve an OOM by overloading th ...
CVE-2026-28383
A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service.
CVE-2026-28374
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2026-28376 The Grafana Live push endpoint can be exploited to cause unbounded mem ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-28383 A request to the Grafana plugin resources endpoint can cause unbounded ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-28380 Any Editor could delete any snapshot, even if they have no access to r ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-33380 A vulnerability in SQL Expressions allows an authenticated attacker to ... | CVSS3: 6.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin ... | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| CVE-2026-33381 When a user's access to mint tokens for a service account is revoked, ... | CVSS3: 5.9 | 0% Низкий | 4 месяца назад |
| CVE-2026-33376 When using an IPv6 allow-list for the Auth Proxy feature, it defaults ... | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
| CVE-2026-33378 Using the $__timeGroup macro, one can achieve an OOM by overloading th ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-28383 A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-28374 Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations. | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу