Known vulnerabilities in grafana-pcp

Vendor: OpenAnolis
Software: grafana-pcp
Software CPE: cpe:2.3:o:openanolis:grafana-pcp:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting grafana-pcp grafana-pcp is affected by 11 known vulnerabilities: 1 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 5.1.1-14 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 50 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 5.1.1-14 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 70 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 5.1.1-14 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 61 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 5.1.1-13 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 134 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 5.1.1-12 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 143 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 5.1.1-12 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 116 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 5.1.1-11 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 5.1.1-10 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355		 CWE-457 Medium
No
No
 5.1.1-9.0.1 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394		 CWE-401 Medium
No
No
 5.1.1-2.0.1 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 3.2.0-3.0.1 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more