Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-10452

Fixed in a distro release EPSS <1%CVSS 2.2

Organization admins can delete pending invites created in an organization they are not part of.

Published 2024-10-29 · CVE record · OSV

Products: grafana

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/grafana/grafanano fix

Distro releases

ReleasePackageFixed in
Chainguardgrafana-11.211.2.10.01-r7
Chainguardgrafana-fips-11.60
Chainguardgrafana-fips-12.012.0.10-r6
Chainguardgrafana-fips-12.112.1.10.01-r3
Chainguardgrafana-fips-12.212.2.10-r0
Chainguardgrafana-fips-12.30
Chainguardgrafana-fips-12.40
Chainguardgrafana-fips-13.00
Chainguardgrafana-fips-13.10
SUSE Linux Enterprise Module for Package Hub 15 SP5govulncheck-vulndb0.0.20241104T154416-150000.1.12.1
SUSE Linux Enterprise Module for Package Hub 15 SP6govulncheck-vulndb0.0.20241104T154416-150000.1.12.1
SUSE Package Hub 12govulncheck-vulndb0.0.20241104T154416-5.1
Ubuntu 16.04 LTSgrafanano fix
openSUSE Leap 15.5govulncheck-vulndb0.0.20241104T154416-150000.1.12.1
openSUSE Leap 15.6govulncheck-vulndb0.0.20241104T154416-150000.1.12.1
openSUSE Tumbleweedgovulncheck-vulndb0.0.20241104T154416-1.1