Home

Description

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.

PUBLISHED Reserved 2026-02-27 | Published 2026-03-27 | Updated 2026-05-13 | Assigner GRAFANA




MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Product status

Default status
unaffected

8.1.0 (semver) before 11.6.14
affected

12.0.0 (semver) before 12.1.10
affected

12.2.0 (semver) before 12.2.8
affected

12.3.0 (semver) before 12.3.6
affected

12.4.0 (semver) before 12.4.2
affected

References

grafana.com/security/security-advisories/cve-2026-28375 vendor-advisory

cve.org (CVE-2026-28375)

nvd.nist.gov (CVE-2026-28375)

Download JSON