Grafana Labs
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 93 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 25, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors
Server-side expression parser denial of service
Azure Monitor access token disclosure via SSRF
Alerting contact point authorization bypass via schema downgrade
Viewer role can create, modify and delete Loki alerting rules
Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs
Unbounded memory allocation in the Prometheus rule conversion API
Library panel can be moved into a folder without library panel create permission
Paused shared dashboard access tokens still expose data source configuration
SAML assertion replay via skipped InResponseTo validation
Monitor Grafana Labs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.