grafana vulnerabilities (Rocky Linux)
80 vulnerabilities.
grafanaRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgrafanaRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 HighgrafanaRocky LinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighgrafanaRocky LinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighgrafanaRocky LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgrafanaRocky LinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumgrafanaRocky LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgrafanaRocky LinuxGrafana account takeover via OAuth vulnerability7.1 HighgrafanaRocky LinuxCross-site Scripting (XSS)5.4 MediumgrafanaRocky LinuxUncontrolled Resource Consumption in promhttp7.5 HighgrafanaRocky LinuxExposure of Sensitive Information in Grafana4.3 MediumgrafanaRocky LinuxCross Site Request Forgery in Grafana6.3 MediumgrafanaRocky LinuxCross site scripting in Grafana proxy6.5 MediumgrafanaRocky LinuxOAuth Identity Token exposure in Grafana4.3 MediumgrafanaRocky Linuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgrafanaRocky LinuxDirectory Traversal in Grafana4.3 MediumgrafanaRocky LinuxSnapshot authentication bypass in grafana9.8 CriticalgrafanaRocky LinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgrafanaRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgrafanaRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgrafanaRocky LinuxDenial of service in Grafana7.5 HighgrafanaRocky LinuxIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgrafanaRocky LinuxXML Processing error in github.com/crewjam/saml9.8 CriticalgrafanaRocky LinuxGrafana XSS via a query alias for the ElasticSearch datasource6.1 MediumgrafanaRocky LinuxDOMPurify nesting-based mXSS10.0 CriticalgrafanaRocky LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical