https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:28:53.599262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00493 bdu:2023-00493 2026-10-05T22:28:53.629221+00:00 bdu:2023-00493 https://cve.radiocsirt.org/vuln/bit-grafana-2021-43798 BIT-grafana-2021-43798 — Grafana path traversal 2026-10-05T22:28:53.629273+00:00

Affected: Bitnami: grafana

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

 https://cve.radiocsirt.org/vuln/euvd-2026-255903 EUVD-2026-255903 2026-10-05T22:28:53.629312+00:00 EUVD-2026-255903 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43798 fkie_cve-2021-43798 2026-10-05T22:28:53.629327+00:00

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

 https://cve.radiocsirt.org/vuln/ghsa-8pjx-jj86-j47p GHSA-8pjx-jj86-j47p — Grafana path traversal 2026-10-05T22:28:53.629354+00:00

Affected: Go: github.com/grafana/grafana

Today we are releasing Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7. This patch release includes a high severity security fix that affects Grafana versions from v8.0.0-beta1 through v8.3.0.

Release v8.3.1, only containing a security fix:

- [Download Grafana 8.3.1](https://grafana.com/grafana/download/8.3.1) - [Release notes](https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-3-1/)

Release v8.2.7, only containing a security fix:

- [Download Grafana 8.2.7](https://grafana.com/grafana/download/8.2.7) - [Release notes](https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-2-7/)

Release v8.1.8, only containing a security fix:

- [Download Grafana 8.1.8](https://grafana.com/grafana/download/8.1.8) - [Release notes](https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-1-8/)

Release v8.0.7, only containing a security fix:

- [Download Grafana 8.0.7](https://grafana.com/grafana/download/8.0.7) - [Release notes](https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-0-7/)

## Path Traversal ([CVE-2021-43798](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43798))

### Summary

On 2021-12-03, we received a report that Grafana is vulnerable to directory traversal, allowing access to local files. We have confirmed this for versions 8.0.0-beta1 to 8.3.0. Thanks to our defense-in-depth approach, at no time has [Grafana Cloud](https://grafana.com/cloud) been vulnerable.

The vulnerable URL path is: <grafana_host_url>/p…

 https://cve.radiocsirt.org/vuln/gsd-2021-43798 gsd-2021-43798 2026-10-05T22:28:53.629459+00:00 gsd-2021-43798 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11816-1 openSUSE-SU-2024:11816-1 — grafana-8.3.4-1.1 on GA media 2026-10-05T22:28:53.629473+00:00

grafana-8.3.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-fu-2022:1419-1 SUSE-FU-2022:1419-1 — Feature update for grafana 2026-10-05T22:28:53.629495+00:00

Feature update for grafana

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43798 Withdrawn: UBUNTU-CVE-2021-43798 2026-10-05T22:28:53.629516+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: grafana

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0404 WID-SEC-W-2022-0404 — Grafana: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-05T22:28:53.629539+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.