CVE-2026-28375
Fixed in a distro release EPSS <1%CVSS 6.5
A testdata data-source can be used to trigger out-of-memory crashes in Grafana.
Products: grafana
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | grafana-11.5 | no fix |
| Chainguard | grafana-11.6 | 0 |
| Chainguard | grafana-12.0 | no fix |
| Chainguard | grafana-12.1 | 0 |
| Chainguard | grafana-12.2 | 0 |
| Chainguard | grafana-12.3 | 0 |
| Chainguard | grafana-fips-11.5 | no fix |
| Chainguard | grafana-fips-11.6 | 11.6.14-r2 |
| Chainguard | grafana-fips-12.0 | no fix |
| Chainguard | grafana-fips-12.1 | 12.1.10.01-r0 |
| Chainguard | grafana-fips-12.2 | 12.2.8.01-r0 |
| Chainguard | grafana-fips-12.3 | 12.3.6.01-r0 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-lusitaniae-apache_exporter | 1.0.10-150002.3.6.1 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-prometheus-prometheus | 3.5.0-150002.3.8.1 |
| SUSE Multi Linux Manager Tools SLE-15 | grafana | 11.6.14+security01-150002.4.14.1 |
| SUSE Multi Linux Manager Tools SLE-15 | prometheus-blackbox_exporter | 0.26.0-150002.3.6.1 |
| SUSE Multi Linux Manager Tools SLE-15 | spacecmd | 5.1.13-150002.3.9.3 |
| SUSE Multi Linux Manager Tools SLE-15 | uyuni-tools | 5.1.26-150002.3.12.1 |
| SUSE Multi Linux Manager Tools SLE-Micro-5 | prometheus-blackbox_exporter | 0.26.0-150002.3.6.1 |
| SUSE Multi Linux Manager Tools SLE-Micro-5 | uyuni-tools | 5.1.26-150002.3.12.1 |
| Ubuntu 16.04 LTS | grafana | no fix |
| Wolfi | grafana-11.6 | 0 |
| Wolfi | grafana-12.1 | 0 |
| Wolfi | grafana-12.2 | 0 |
| Wolfi | grafana-12.3 | 0 |
| openSUSE Leap 16.0 | grafana | 11.6.14+security04-bp160.1.1 |
| openSUSE Tumbleweed | grafana | 11.6.14+security01-1.1 |