Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how grafana labs compares to other vendors in security performance

View Risk Score →

Grafana GrafanaDenial of service via unbounded request body size

Risk 43
Severity
7.5
First published (updated )
CVE-2026-33382

Grafana GrafanaPre-authentication denial of service in the public dashboard query endpoint

Risk 43
Severity
7.5
First published (updated )
CVE-2026-42127

Grafana Labs Grafana Geomap panelStored XSS in the Geomap panel tile-layer attribution

Risk 39
Severity
7.3
EPSS
0.25%
First published (updated )
CVE-2026-9029

Grafana Labs Grafana 13.1End of life details

EOL
Mar 20, 2027
First published (updated )
EOL-grafana-13.1

Grafana Labs Grafana OperatorOperator - Namespaced User Path Traversal

Risk 79
Severity
6.4
First published (updated )
CVE-2026-11769
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro

Risk 38
Severity
6.5
First published (updated )
CVE-2026-33378

Grafana GrafanaGrafana plugin resources can lead to unbounded memory allocation

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28383

Grafana GrafanaBAC in Snapshot API allows deletion of unauthorized dashboard snapshots

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28380

Grafana GrafanaSQL Expressions Read File From Disk

Risk 38
Severity
6.5
First published (updated )
CVE-2026-33380

Grafana GrafanaGrafana Live push endpoint allows unbounded memory allocation leading to OOM

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28376
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaViewer-triggered race condition in Grafana Live leads to complete server crash

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28379

Grafana Labs Grafana LokiLoki Path Traversal - CVE-2021-36156 Bypass

Risk 27
Severity
5.3
First published (updated )
CVE-2026-21726

Grafana GrafanaGrafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record

Risk 23
Severity
3.3
First published (updated )
CVE-2026-21727

Grafana Labs Grafana AlertingGrafana Alerting Editors can edit destination of webhooks they did not create

Risk 38
Severity
1.3
First published (updated )
CVE-2025-12141

Grafana Labs Grafana 13.0Out of support

EOL
Jan 9, 2027
Support Ends
Jun 22, 2026
First published (updated )
EOL-grafana-13.0
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaQuery resampling can cause unbounded memory allocations

Risk 38
Severity
6.5
First published (updated )
CVE-2026-27879

Grafana GrafanaGrafana Testdata datasource can issue unbounded memory allocations

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28375

Grafana GrafanaRCE on Grafana via sqlExpressions

Risk 72
Severity
9.1
First published (updated )
CVE-2026-27876

Grafana GrafanaPublic dashboards discloses all direct mode datasources

Risk 43
Severity
7.5
First published (updated )
CVE-2026-27877

Grafana GrafanaMissing Protected-field Authorization in Provisioning Contact Points API

Risk 34
Severity
5.4
First published (updated )
CVE-2026-21724
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaGrafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

Risk 38
Severity
6.5
First published (updated )
CVE-2026-33375

Grafana Labs Grafana 12.4Out of support

EOL
May 24, 2027
Support Ends
Apr 17, 2026
First published (updated )
EOL-grafana-12.4

Grafana Labs GrafanaXSS, Path Traversal, SSRF

Risk 33
Severity
8.3
EPSS
0.04%
First published (updated )
CVE-2026-22638

BleepingComputerGrafana warns of max severity admin spoofing vulnerability

First published (updated )
News
BleepingComputer

go/github.com/grafana/grafanaIncorrect privilege assignment

Risk 91
Severity
10
First published (updated )
CVE-2025-41115
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana Labs Grafana 12.3Out of support

EOL
Aug 19, 2026
Support Ends
Feb 24, 2026
First published (updated )
EOL-grafana-12.3

Grafana Labs Grafana 12.2Reached end of life

EOL
Jun 23, 2026
Support Ends
Nov 19, 2025
First published (updated )
EOL-grafana-12.2

Grafana Labs Infinity DataSource PluginSSRF in Infinity Datasource Plugin

Risk 18
Severity
5
EPSS
0.03%
First published (updated )
CVE-2025-8341

Grafana Labs Grafana 12.1Reached end of life

EOL
Apr 22, 2026
Support Ends
Sep 23, 2025
First published (updated )
EOL-grafana-12.1

BleepingComputerGrafana releases critical security update for Image Renderer plugin

Exploited
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203