Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Hardened Images/grafana12.4
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
CVE-2026-119191 · GHSA-RHR8-3PM8-CQ29
node-forge
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-11-10
kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
CVE-2026-100353 · GHSA-VRCC-3CH7-HPPW
Version ranges need review.
github.com/getkin/kin-openapi
Red Hat Hardened Images/grafana12.4
Go
Red Hat
High
Fix reported
2026-11-06
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
CVE-2026-118772 · GHSA-4528-X5FX-H6HG
@hapi/joi
joi
npm
Red Hat
High
Fix reported
2026-10-31
Forge: TLS client crash when the server sends no certificate
CVE-2026-118778 · GHSA-525V-9GP9-W22H
node-forge
Red Hat Hardened Images/grafana12.4
npm
Red Hat
Medium
Fix reported
2026-10-31
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
CVE-2026-110816 · GHSA-6PQ8-JHM2-2VCW
qs
Red Hat Hardened Images/grafana12.4
npm
Red Hat
Medium
Fix reported
2026-10-29
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
CVE-2026-115897 · GHSA-M5MM-P8H7-M29V
serialize-javascript
Red Hat Hardened Images/grafana12.4
npm
Red Hat
Low
Fix reported
2026-10-24
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-09-30
grafana: Grafana: Information disclosure via improper RBAC folder validation for deleted dashboards
CVE-2026-16491
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: Grafana: Information disclosure via legacy schema switch in contact points
CVE-2026-100105
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
High
No fix reported
Not recorded
grafana: Math expressions could crash Grafana
CVE-2026-88858
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
Medium
No fix reported
Not recorded
grafana: Azure Monitor data source could leak its Azure access token
CVE-2026-88967
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel9
Red Hat
High
No fix reported
Not recorded
picomatch: picomatch: Denial of Service via single-branch repeated extglob patterns
CVE-2026-112366
Red Hat Hardened Images/grafana12.4
Red Hat Hardened Images/grafana13.1
Red Hat
High
No fix reported
Not recorded
serialize-javascript: serialize-javascript: Cross-site scripting via unescaped function serialization
CVE-2026-115754
Red Hat Hardened Images/grafana12.4
Red Hat
Medium
No fix reported
Not recorded
