FLAT-SV1FL (CVE-2026-76844)
Lack of data validation - Path Traversal In grafana
3.8
Low
Ecosystem: RPM
Component: grafana
FLAT-ZTEER (CVE-2026-53669)
Uncontrolled external site redirect In grafana
1.2
Low
Ecosystem: RPM
Component: grafana
FLAT-XWY0Q (CVE-2026-21723)
Asymmetric denial of service In grafana
6.6
Medium
Ecosystem: RPM
Component: grafana
FLAT-YVYH9 (CVE-2026-8609)
Asymmetric denial of service In grafana
6.6
Medium
Ecosystem: RPM
Component: grafana
FLAT-UT0V8 (CVE-2026-33382)
Asymmetric denial of service In grafana
6.6
Medium
Ecosystem: RPM
Component: grafana
FLAT-ROCBN (CVE-2026-55689)
Authentication mechanism absence or evasion In grafana
6.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-505MI (CVE-2026-55170)
Unauthorized access to screen In grafana
0.5
Low
Ecosystem: RPM
Component: grafana
FLAT-Q88GT (CVE-2026-10601)
Lack of data validation - Path Traversal In grafana
6.2
Medium
Ecosystem: RPM
Component: grafana
FLAT-CY378 (CVE-2026-33377)
Excessive privileges In grafana
2.3
Low
Ecosystem: RPM
Component: grafana
FLAT-IX420 (CVE-2026-33376)
Improper authorization control for web services In grafana
6.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-RRRVJ (CVE-2026-28383)
Improper resource allocation In grafana
4.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-CMDW6 (CVE-2026-28380)
Improper authorization control for web services In grafana
4.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-YY41W (CVE-2026-28379)
Race condition In grafana
2.3
Low
Ecosystem: RPM
Component: grafana
FLAT-YYLO5 (CVE-2026-28376)
Improper resource allocation In grafana
4.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-EF9W2 (CVE-2026-28374)
Improper authorization control for web services In grafana
1.3
Low
Ecosystem: RPM
Component: grafana
FLAT-GFVK1 (CVE-2026-44294)
Lack of data validation In grafana
1.7
Low
Ecosystem: RPM
Component: grafana
FLAT-GBI3E (CVE-2026-44293)
Lack of data validation In grafana
5.2
Medium
Ecosystem: RPM
Component: grafana
FLAT-FS8B9 (CVE-2026-44288)
Improper resource allocation In grafana
1.7
Low
Ecosystem: RPM
Component: grafana
FLAT-E18IE (CVE-2026-21727)
Unauthorized access to screen In grafana
2.1
Low
Ecosystem: RPM
Component: grafana
FLAT-OTLDT (CVE-2025-12141)
Unauthorized access to screen In grafana
5.8
Medium
Ecosystem: RPM
Component: grafana
FLAT-FX94Q (CVE-2026-33891)
Improper resource allocation In grafana
4.6
Medium
Ecosystem: RPM
Component: grafana
FLAT-Z4DGE (CVE-2026-28375)
Asymmetric denial of service - ReDoS In grafana
2.3
Low
Ecosystem: RPM
Component: grafana
FLAT-1MAO7 (CVE-2026-27880)
Asymmetric denial of service In grafana
6.6
Medium
Ecosystem: RPM
Component: grafana
FLAT-RAIJU (CVE-2026-27879)
Asymmetric denial of service In grafana
4.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-JPRZF (CVE-2026-21725)
Race condition In grafana
0.5
Low
Ecosystem: RPM
Component: grafana
FLAT-HWSGM (CVE-2026-21722)
Unauthorized access to screen In grafana
1.7
Low
Ecosystem: RPM
Component: grafana
FLAT-62X3M (CVE-2026-21721)
Excessive privileges In grafana
6.2
Medium
Ecosystem: RPM
Component: grafana
FLAT-5CKR9 (CVE-2025-47908)
Asymmetric denial of service In grafana
6.6
Medium
Ecosystem: RPM
Component: grafana
FLAT-F3CM4 (CVE-2025-6197)
Uncontrolled external site redirect In grafana
0.4
Low
Ecosystem: RPM
Component: grafana
FLAT-79YHH (CVE-2025-3580)
Improper authorization control for web services In grafana
4.8
Medium
Ecosystem: RPM
Component: grafana
FLAT-7VJGQ (CVE-2024-8118)
Improper authorization control for web services In grafana
0.6
Low
Ecosystem: RPM
Component: grafana
FLAT-N35ZF (CVE-2023-1387)
Business information leak In grafana
2.3
Low
Ecosystem: RPM
Component: grafana
FLAT-QAD85 (CVE-2023-22462)
Server side cross-site scripting In grafana
4.1
Medium
Ecosystem: RPM
Component: grafana
FLAT-2PP0S (CVE-2022-23552)
Server side cross-site scripting In grafana
5.8
Medium
Ecosystem: RPM
Component: grafana
FLAT-BBCLM (CVE-2022-32275)
Server-side request forgery (SSRF) In grafana
4.9
Medium
Ecosystem: RPM
Component: grafana
FLAT-2UEDB (CVE-2022-21673)
Unauthorized access to screen In grafana
0.6
Low
Ecosystem: RPM
Component: grafana
FLAT-OQQ8M (CVE-2020-12052)
Reflected cross-site scripting (XSS) In grafana
1.2
Low
Ecosystem: RPM
Component: grafana