PkgSeer

Vulnerabilities

Last updated 55 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/grafana/grafana Grafana geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug High Risk 7.3 3 months ago 4 hours ago
github.com/grafana/grafana Grafana geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug in github.com/grafana/grafana Unknown 5 hours ago 4 hours ago
github.com/grafana/grafana Grafana: Path traversal in the Tempo and Loki data source plugins Medium Risk 5.4 3 months ago 4 hours ago
github.com/grafana/grafana Grafana: Path traversal in the Tempo and Loki data source plugins in github.com/grafana/grafana Unknown 5 hours ago 4 hours ago
github.com/grafana/grafana Grafana: Pre-authentication denial of service in the public dashboard query handler High Risk 7.5 3 months ago 4 hours ago
github.com/grafana/grafana Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. High Risk 7.7 3 months ago 4 hours ago
github.com/grafana/grafana Grafana: Pre-authentication denial of service in the public dashboard query handler in github.com/grafana/grafana Unknown 5 hours ago 4 hours ago
github.com/grafana/grafana Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana Unknown 5 hours ago 4 hours ago
github.com/grafana/grafana Grafana: SQL Expressions Read File From Disk Medium Risk 6.3 4 months ago 18 days ago
github.com/grafana/grafana Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions Medium Risk 5.4 6 months ago 18 days ago
github.com/grafana/grafana Grafana has a Cross-site Scripting issue Medium Risk 6.8 7 months ago 18 days ago
github.com/grafana/grafana Grafana: Users can generate Service Account tokens after permissions removal Medium Risk 5.9 4 months ago 18 days ago
github.com/grafana/grafana Grafana public dashboards disclose all direct mode datasources Medium Risk 6.5 6 months ago 18 days ago
github.com/grafana/grafana Grafana Incorrect Privilege Assignment vulnerability Critical 10.0 10 months ago 18 days ago
github.com/grafana/grafana Grafana is vulnerable to XSS attacks through open redirects and path traversal High Risk 7.6 1 year ago 18 days ago
github.com/grafana/grafana Grafana's insecure DingDing Alert integration exposes sensitive information Medium Risk 4.3 1 year ago 18 days ago
github.com/grafana/grafana Grafana's datasource proxy API allows authorization checks to be bypassed Medium Risk 5.0 1 year ago 18 days ago
github.com/grafana/grafana Grafana long dashboard title or panel name causes unresponsives Low Risk 2.7 1 year ago 18 days ago
github.com/grafana/grafana Grafana vulnerable to authenticated users bypassing dashboard, folder permissions High Risk 8.3 1 year ago 18 days ago
github.com/grafana/grafana Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin High Risk 7.6 1 year ago 18 days ago
github.com/grafana/grafana Grafana Alerting VictorOps integration could be exposed to users with Viewer permission Medium Risk 4.3 1 year ago 18 days ago
github.com/grafana/grafana Grafana org admin can delete pending invites in different org Low Risk 2.2 1 year ago 18 days ago
github.com/grafana/grafana Grafana Command Injection And Local File Inclusion Via Sql Expressions Critical 9.9 1 year ago 18 days ago
github.com/grafana/grafana-plugin-sdk-go Grafana plugin SDK Information Leakage Medium Risk 5.9 2 years ago 18 days ago
github.com/grafana/grafana Grafana plugin data sources vulnerable to access control bypass Medium Risk 4.4 2 years ago 18 days ago
github.com/grafana/grafana Grafana Plugin signature bypass Medium Risk 6.1 2 years ago 18 days ago
github.com/grafana/grafana Grafana Race condition allowing privilege escalation Critical 9.8 2 years ago 18 days ago
github.com/grafana/grafana Grafana Stored Cross-site Scripting in Unified Alerting High Risk 7.3 2 years ago 18 days ago
github.com/grafana/grafana Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins Medium Risk 6.8 2 years ago 18 days ago
github.com/grafana/grafana Grafana Email addresses and usernames can not be trusted Medium Risk 6.4 2 years ago 18 days ago
github.com/grafana/grafana Grafana User enumeration via forget password Medium Risk 6.7 2 years ago 18 days ago
github.com/grafana/grafana Grafana Spoofing originalUrl of snapshots Medium Risk 6.7 2 years ago 18 days ago
github.com/grafana/grafana Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins Medium Risk 4.9 2 years ago 18 days ago
github.com/grafana/grafana Grafana folders admin only permission privilege escalation High Risk 7.6 2 years ago 18 days ago
github.com/grafana/grafana Grafana: Users outside an organization can delete a snapshot with its key Medium Risk 6.5 2 years ago 18 days ago
github.com/grafana/grafana Grafana's users with permissions to create a data source can CRUD all data sources Medium Risk 6.0 2 years ago 18 days ago
github.com/grafana/grafana/pkg/web Grafana Cross Site Request Forgery (CSRF) Medium Risk 6.8 2 years ago 18 days ago
github.com/grafana/grafana Grafana Arbitrary File Read Medium Risk 6.5 2 years ago 18 days ago
github.com/grafana/grafana Grafana Escalation from admin to server admin when auth proxy is used Medium Risk 6.6 2 years ago 18 days ago
github.com/grafana/grafana Grafana when using email as a username can block other users from signing in Medium Risk 4.3 2 years ago 18 days ago
github.com/grafana/grafana Grafana vulnerable to Stored Cross-site Scripting in Text plugin Medium Risk 6.4 3 years ago 18 days ago
github.com/grafana/grafana Grafana stored XSS Medium Risk 5.4 4 years ago 18 days ago
github.com/grafana/grafana Grafana XSS via the OpenTSDB datasource Medium Risk 6.1 4 years ago 18 days ago
github.com/grafana/grafana Grafana XSS via a query alias for the ElasticSearch datasource Medium Risk 6.1 4 years ago 18 days ago
github.com/grafana/grafana Grafana world readable configuration files Medium Risk 5.5 4 years ago 18 days ago
github.com/grafana/grafana Grafana XSS via a column style Medium Risk 6.1 4 years ago 18 days ago
github.com/grafana/grafana Grafana XSS in header column rename Medium Risk 6.1 4 years ago 18 days ago
github.com/grafana/grafana Grafana information disclosure Medium Risk 5.5 4 years ago 18 days ago
github.com/grafana/grafana Grafana account takeover via OAuth vulnerability High Risk 7.1 2 years ago 18 days ago
github.com/grafana/grafana Grafana privilege escalation vulnerability Medium Risk 6.7 2 years ago 1 month ago
Data courtesy of OSV.dev
Page 1