CVE-2026-28375
CVE-2026-28375 · Grafana Testdata datasource can issue unbounded memory allocations
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A testdata data-source can be used to trigger out-of-memory crashes in Grafana.
CVSS 6.5 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
grafana
- Versions
- ≥ 8.1.0, < 11.6.14: Affected (semver)
- ≥ 12.0.0, < 12.1.10: Affected (semver)
- ≥ 12.2.0, < 12.2.8: Affected (semver)
- ≥ 12.3.0, < 12.3.6: Affected (semver)
- ≥ 12.4.0, < 12.4.2: Affected (semver)
Update to 11.6.14; Update to 12.1.10; Update to 12.2.8; Update to 12.3.6; Update to 12.4.2
grafana Ubuntu:16.04:LTS
- Versions
- 2.6.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published