5.3
Moyenne
CVE-2026-95502 A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning…
Description
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Nanogit 1.7 | premières → < 1.7.0 | 1.7.0 |
| Grafana OSS 13.2 | 13.2.0 → < 13.2.4 | 13.2.4 |
| Grafana OSS 13.1 | 13.1.0 → < 13.1.8 | 13.1.8 |
| Grafana OSS 13.0 | 13.0.0 → < 13.0.11 | 13.0.11 |
| Grafana Enterprise 13.2 | 13.2.0 → < 13.2.4 | 13.2.4 |
| Grafana Enterprise 13.1 | 13.1.0 → < 13.1.8 | 13.1.8 |
| Grafana Enterprise 13.0 | 13.0.0 → < 13.0.11 | 13.0.11 |