Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 10/rhel10/grafana
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
CVE-2026-76905 · GHSA-MMFR-PMJX-HW9W
Version ranges need review.
github.com/getkin/kin-openapi
OpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
urllib3 allows an unbounded number of links in the decompression chain
CVE-2025-66418 · GHSA-GM62-XV2J-4W53
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
CVE-2026-21441 · GHSA-38JV-5279-WG99
Version ranges need review.
urllib3
External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
Denial of service via malicious preflight requests in github.com/rs/cors
CVE-2025-47908 · GHSA-MH55-GQVF-XFWM
Version ranges need review.
github.com/rs/cors
Multicluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema
CVE-2026-73502 · GHSA-JPCW-4WR7-C3VQ
Version ranges need review.
github.com/getkin/kin-openapi
Migration Toolkit for Applications 8/mta/mta-hub-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
grafana: RECORDED QUERIES REMOTE-WRITE VALIDATION COULD USE DATA SOURCE CREDENTIALS BEFORE CHECKING PERMISSIONS
CVE-2026-12933
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: GOOGLE CLOUD MONITORING DATA SOURCE COULD REACH OTHER CLOUD MONITORING API PATHS
CVE-2026-107365
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: GIT SYNC CONNECTIONS COULD SEND CREDENTIALS TO INTERNAL ADDRESSES
CVE-2026-110289
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: Grafana: Viewer role can create, modify and delete Loki alerting rules
CVE-2026-9703
Multicluster Global Hub 5/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat
High
No fix reported
Not recorded
grafana: Math expressions could crash Grafana
CVE-2026-88858
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: OAuth and OIDC tokens written unredacted to Grafana server logs
CVE-2026-79656
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs
CVE-2026-88031
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Red Hat
High
No fix reported
Not recorded
grafana: Grafana: Information disclosure via Azure Monitor resource proxy
CVE-2026-93294
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: grafana: Authorization bypass via missing destination folder permission check
CVE-2026-81842
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
