<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: grafana</title><description>Every new CVE for grafana.</description><link>https://agentprime.io/</link><item><title>CVE-2026-27879: Query resampling can cause unbounded memory allocations</title><link>https://agentprime.io/advisories/CVE-2026-27879/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27879/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 14:28:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28375: Grafana Testdata datasource can issue unbounded memory allocations</title><link>https://agentprime.io/advisories/CVE-2026-28375/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28375/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 14:26:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27876: RCE on Grafana via sqlExpressions</title><link>https://agentprime.io/advisories/CVE-2026-27876/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27876/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 14:24:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-27880: OpenFeature evaluation API reads input data with no bounds</title><link>https://agentprime.io/advisories/CVE-2026-27880/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27880/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 14:12:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21725: Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name</title><link>https://agentprime.io/advisories/CVE-2026-21725/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21725/</guid><description>CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 12:35:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6197: Open redirect in Grafana</title><link>https://agentprime.io/advisories/CVE-2025-6197/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6197/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Jul 2025 07:48:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3580: Improper access control in Grafana</title><link>https://agentprime.io/advisories/CVE-2025-3580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3580/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 May 2025 13:44:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2703: Cross-site scripting in Grafana and others</title><link>https://agentprime.io/advisories/CVE-2025-2703/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2703/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Apr 2025 11:36:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-8118: Grafana alerting wrong permission on datasource rule write endpoint</title><link>https://agentprime.io/advisories/CVE-2024-8118/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-8118/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Sep 2024 18:46:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-1387: Information disclosure in Grafana and others</title><link>https://agentprime.io/advisories/CVE-2023-1387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1387/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Apr 2023 13:47:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23498: When query caching is enabled in Grafana users can query another users session</title><link>https://agentprime.io/advisories/CVE-2022-23498/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23498/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Feb 2023 21:34:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23552: Grafana stored XSS in FileUploader component</title><link>https://agentprime.io/advisories/CVE-2022-23552/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23552/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jan 2023 22:59:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-29170: Grafana Enterprise datasource network restrictions bypass via HTTP redirects</title><link>https://agentprime.io/advisories/CVE-2022-29170/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-29170/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 May 2022 16:10:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-24812: FGAC API Key privilege escalation in Grafana</title><link>https://agentprime.io/advisories/CVE-2022-24812/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-24812/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Apr 2022 17:00:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-21673: OAuth Identity Token exposure in Grafana</title><link>https://agentprime.io/advisories/CVE-2022-21673/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-21673/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jan 2022 21:35:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43813: Directory Traversal in Grafana</title><link>https://agentprime.io/advisories/CVE-2021-43813/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43813/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Dec 2021 17:30:12 GMT</pubDate><category>CVE</category></item></channel></rss>