Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27880

Fixed in a distro release EPSS <1%CVSS 7.5

The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.

Published 2026-03-27 · CVE record · OSV

Products: grafana, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

Distro releases

ReleasePackageFixed in
Chainguardgrafana-11.511.5.10-r2
Chainguardgrafana-11.611.6.14.01-r2
Chainguardgrafana-12.012.0.10-r0
Chainguardgrafana-12.112.1.10.01-r2
Chainguardgrafana-12.212.2.8.01-r2
Chainguardgrafana-12.312.3.6-r1
Chainguardgrafana-fips-11.511.5.10-r3
Chainguardgrafana-fips-11.611.6.14-r2
Chainguardgrafana-fips-12.012.0.10-r2
Chainguardgrafana-fips-12.112.1.10.01-r0
Chainguardgrafana-fips-12.212.2.8.01-r0
Chainguardgrafana-fips-12.312.3.6.01-r0
Ubuntu 16.04 LTSgrafanano fix
Wolfigrafana-11.511.5.10-r2
Wolfigrafana-11.611.6.14.01-r2
Wolfigrafana-12.012.0.10-r0
Wolfigrafana-12.112.1.10.01-r2
Wolfigrafana-12.212.2.8.01-r2
Wolfigrafana-12.312.3.6-r1