grafana-selinux vulnerabilities (TuxCare)
36 vulnerabilities.
grafana-selinuxTuxCareSession takeover via Auth Proxy cache key collision7.1 Highgrafana-selinuxTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgrafana-selinuxTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgrafana-selinuxTuxCareAdd recursion depth guard during decode in encoding/xml7.5 Highgrafana-selinuxTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumgrafana-selinuxTuxCareApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgrafana-selinuxTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highgrafana-selinuxTuxCarePre-authentication denial of service in the public dashboard query endpoint7.5 Highgrafana-selinuxTuxCarePath traversal in the Tempo and Loki data source plugins5.4 Mediumgrafana-selinuxTuxCareGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Mediumgrafana-selinuxTuxCareGrafana plugin resources can lead to unbounded memory allocation6.5 Mediumgrafana-selinuxTuxCareAuth Proxy IPv6 whitelist bypass7.4 Highgrafana-selinuxTuxCareBAC in Snapshot API allows deletion of unauthorized dashboard snapshots6.5 Mediumgrafana-selinuxTuxCareDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 Highgrafana-selinuxTuxCareGrafana Live push endpoint allows unbounded memory allocation leading to OOM6.5 Mediumgrafana-selinuxTuxCareViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Mediumgrafana-selinuxTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highgrafana-selinuxTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highgrafana-selinuxTuxCareGrafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record3.3 Lowgrafana-selinuxTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgrafana-selinuxTuxCareInefficient policy validation in crypto/x5097.5 Highgrafana-selinuxTuxCareQuery resampling can cause unbounded memory allocations6.5 Mediumgrafana-selinuxTuxCareGrafana Testdata datasource can issue unbounded memory allocations6.5 Mediumgrafana-selinuxTuxCarePublic dashboards discloses all direct mode datasources6.5 Mediumgrafana-selinuxTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highgrafana-selinuxTuxCarePublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumgrafana-selinuxTuxCareDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highgrafana-selinuxTuxCareUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highgrafana-selinuxTuxCareUnexpected session resumption in crypto/tls10.0 Criticalgrafana-selinuxTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgrafana-selinuxTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highgrafana-selinuxTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgrafana-selinuxTuxCareUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumgrafana-selinuxTuxCareGo JOSE's Parsing Vulnerable to Denial of Service6.6 Mediumgrafana-selinuxTuxCareGrafana org admin can delete pending invites in different org2.2 Lowgrafana-selinuxTuxCareInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical