https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:01:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-03572 bdu:2026-03572 https://cve.radiocsirt.org/vuln/bdu:2026-03572 https://cve.radiocsirt.org/vuln/bit-grafana-2026-21720 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> https://cve.radiocsirt.org/vuln/bit-grafana-2026-21720 https://cve.radiocsirt.org/vuln/euvd-2026-360226 EUVD-2026-360226 https://cve.radiocsirt.org/vuln/euvd-2026-360226 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21720 <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-21720 https://cve.radiocsirt.org/vuln/ghsa-m4rj-q4ph-fr4v <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> https://cve.radiocsirt.org/vuln/ghsa-m4rj-q4ph-fr4v https://cve.radiocsirt.org/vuln/opensuse-su-2026:20654-1 <p>Security update for grafana</p> <p>Security update for grafana</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20654-1 https://cve.radiocsirt.org/vuln/suse-su-2026:1013-1 <p>Security update 5.0.7 for Multi-Linux Manager Client Tools</p> <p>Security update 5.0.7 for Multi-Linux Manager Client Tools</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1013-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-21720 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-21720 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0224 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Denial of Service Angriff durchzuführen oder sich erhöhte Berechtigungen zu verschaffen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Denial of Service Angriff durchzuführen oder sich erhöhte Berechtigungen zu verschaffen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0224