7.5
Élevée
CVE-2026-27880 The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory…
Description
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| grafana 12.4 | 12.4.0 → < 12.4.2 | 12.4.2 |
| grafana 12.3 | 12.3.0 → < 12.3.6 | 12.3.6 |
| grafana 12.2 | 12.2.0 → < 12.2.8 | 12.2.8 |
| grafana 12.1 | 12.1.0 → < 12.1.10 | 12.1.10 |
| Red Hat Enterprise Linux 10 | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées |
Autres CVE de grafana
Les 59 CVE de grafana →
CVE-2026-27879
A resample query can be used to trigger out-of-memory crashes in Grafana
6.5
Moyenne
CVE-2026-28375
A testdata data-source can be used to trigger out-of-memory crashes in Grafana
6.5
Moyenne
CVE-2026-27876
RCE on Grafana via sqlExpressions
9.1
Critique
CVE-2026-27877
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being…
6.5
Moyenne