Поиск уязвимостей
Количество 13
Количество 13
CVE-2026-21720
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.
CVE-2026-21720
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.
CVE-2026-21720
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.
CVE-2026-21720
Every uncached /avatar/:hash request spawns a goroutine that refreshes ...
ROS-20260310-80-0036
Уязвимость grafana
GHSA-m4rj-q4ph-fr4v
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.
BDU:2026-03572
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260310-73-0036
Уязвимость grafana
SUSE-SU-2026:1037-1
Security update for grafana
ALT-PU-2026-2386
ALT-PU-2026-2386: package `grafana` update to version 12.3.2-alt1
SUSE-SU-2026:1013-1
Security update 5.0.7 for Multi-Linux Manager Client Tools
ALT-PU-2026-15352
ALT-PU-2026-15352: package `grafana` update to version 12.3.6-alt1
openSUSE-SU-2026:20654-1
Security update for grafana
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-21720 Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems. | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
 | CVE-2026-21720 Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems. | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
 | CVE-2026-21720 Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems. | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
| CVE-2026-21720 Every uncached /avatar/:hash request spawns a goroutine that refreshes ... | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
 | ROS-20260310-80-0036 Уязвимость grafana | CVSS3: 7.5 | 1% Низкий | 8 месяцев назад |
| GHSA-m4rj-q4ph-fr4v Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems. | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
 | BDU:2026-03572 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
| ROS-20260310-73-0036 Уязвимость grafana | CVSS3: 7.5 | 1% Низкий | 8 месяцев назад |
 | SUSE-SU-2026:1037-1 Security update for grafana | 8 месяцев назад | ||
| ALT-PU-2026-2386 ALT-PU-2026-2386: package `grafana` update to version 12.3.2-alt1 | CVSS3: 10 | 9 месяцев назад | |
| SUSE-SU-2026:1013-1 Security update 5.0.7 for Multi-Linux Manager Client Tools | 8 месяцев назад | ||
| ALT-PU-2026-15352 ALT-PU-2026-15352: package `grafana` update to version 12.3.6-alt1 | CVSS3: 10 | около 2 месяцев назад | |
| openSUSE-SU-2026:20654-1 Security update for grafana | 6 месяцев назад |
Уязвимостей на страницу