Known vulnerabilities in Grafana 13.0.1+security-01

Software: Grafana
Version: 13.0.1+security-01
Software CPE: cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grafana version 13.0.1+security-01 Grafana 13.0.1+security-01 is affected by 9 vulnerabilities: 5 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145791 - Improper Access Control
CVE-2026-19197
CWE-284 Low
No
No
12.4.8, 13.0.6, 13.1.3 26.08.2026 SB2026082657
#VU145350 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-17033
CWE-79 Low
No
No
13.1.0 25.08.2026 SB20260825111
#VU137392 - Resource exhaustion
CVE-2026-8609
CWE-400 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
SB2026081226
#VU137391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-8595
CWE-79 Low
No
No
12.4.4, 13.0.2 13.07.2026 SB2026071338
#VU137390 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-42129
CWE-22 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
#VU137389 - Resource exhaustion
CVE-2026-42127
CWE-400 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
SB2026081237
SB2026081258
#VU137388 - Resource exhaustion
CVE-2026-33382
CWE-400 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
SB2026081226
#VU137387 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-10601
CWE-22 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
#VU137291 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-9029
CWE-79 Low
No
No
12.4.4, 13.0.2 10.07.2026 SB2026071005