Поиск уязвимостей
Количество 19
Количество 19
ELSA-2026-90811
ELSA-2026-90811: grafana security update (MODERATE)
RLSA-2026:54178
Moderate: grafana security, bug fix, and enhancement update
ELSA-2026-54178
ELSA-2026-54178: grafana security, bug fix, and enhancement update (MODERATE)
CVE-2026-8609
An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
CVE-2026-8609
An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
CVE-2026-33382
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.
CVE-2026-33382
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.
ROS-20260728-80-0016
Уязвимость grafana
ROS-20260728-80-0014
Уязвимость grafana
ROS-20260728-73-0014
Уязвимость grafana
ROS-20260728-73-0012
Уязвимость grafana
GHSA-xcrv-g5fh-9wx2
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.
GHSA-j7jj-549c-j492
An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
BDU:2026-14126
Уязвимость маршрута авторизации OAuth платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-14093
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21366-1
Security update for grafana
openSUSE-SU-2026:22125-1
Security update for grafana
SUSE-SU-2026:4600-1
Security update for grafana, system-user-grafana
SUSE-SU-2026:3718-1
Security update for grafana
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2026-90811 ELSA-2026-90811: grafana security update (MODERATE) | 7 дней назад | ||
 | RLSA-2026:54178 Moderate: grafana security, bug fix, and enhancement update | 3 месяца назад | ||
| ELSA-2026-54178 ELSA-2026-54178: grafana security, bug fix, and enhancement update (MODERATE) | 3 месяца назад | ||
 | CVE-2026-8609 An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-8609 An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-33382 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-33382 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | ROS-20260728-80-0016 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-80-0014 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0014 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0012 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| GHSA-xcrv-g5fh-9wx2 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| GHSA-j7jj-549c-j492 An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | BDU:2026-14126 Уязвимость маршрута авторизации OAuth платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| BDU:2026-14093 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:21366-1 Security update for grafana | 4 месяца назад | ||
| openSUSE-SU-2026:22125-1 Security update for grafana | 20 дней назад | ||
| SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana | около 1 месяца назад | ||
| SUSE-SU-2026:3718-1 Security update for grafana | 3 месяца назад |
Уязвимостей на страницу