grafana-graphite vulnerabilities (Red Hat)

19 vulnerabilities.

• grafana-graphite Red Hat Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Fix available 7.5 HighMarch 6, 2026
• grafana-graphite Red Hat Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 Fix available 7.5 HighJanuary 16, 2026
• grafana-graphite Red Hat Excessive resource consumption when printing error string for host certificate validation in crypto/x509 CVE-2025-61729 Fix available 7.5 HighDecember 2, 2025
• grafana-graphite Red Hat Unbounded allocation when parsing GNU sparse map in archive/tar CVE-2025-58183 Fix available 4.3 MediumOctober 8, 2025
• grafana-graphite Red Hat Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin CVE-2025-4123 Public exploitFix available EPSS 97.1% 7.6 HighMay 19, 2025
• grafana-graphite Red Hat Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Fix available 9.1 CriticalApril 3, 2025
• grafana-graphite Red Hat Elliptic's verify function omits uniqueness validation CVE-2024-48949 Fix available 9.1 CriticalOctober 10, 2024
• grafana-graphite Red Hat Grafana account takeover via OAuth vulnerability CVE-2022-31107 Fix available 7.1 HighJuly 15, 2022
• grafana-graphite Red Hat Snapshot authentication bypass in grafana CVE-2021-39226 In KEVFix available EPSS 99.9% 9.8 CriticalOctober 5, 2021
• grafana-graphite Red Hat Grafana Arbitrary File Read CVE-2019-19499 Fix available 6.5 MediumAugust 28, 2020
• grafana-graphite Red Hat Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• grafana-graphite Red Hat Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• grafana-graphite Red Hat Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• grafana-graphite Red Hat Grafana XSS via the OpenTSDB datasource CVE-2020-13430 Fix available 6.1 MediumMay 24, 2020
• grafana-graphite Red Hat Grafana information disclosure CVE-2020-12458 Fix available 5.5 MediumApril 29, 2020
• grafana-graphite Red Hat Grafana world readable configuration files CVE-2020-12459 Fix available 5.5 MediumApril 29, 2020
• grafana-graphite Red Hat Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Fix available 6.1 MediumApril 27, 2020
• grafana-graphite Red Hat Grafana XSS in header column rename CVE-2020-12245 Fix available 6.1 MediumApril 24, 2020
• grafana-graphite Red Hat In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019