grafana-fips-12.4

Direct Vulnerabilities

Known vulnerabilities in the grafana-fips-12.4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Resource Exhaustion	*
M Out-of-bounds Write	<12.4.3-r1
L CVE-2026-42499	<12.4.3-r1
L Cross-site Scripting (XSS)	<12.4.3-r1
H Double Free	<12.4.3-r1
L CVE-2026-39825	<12.4.3-r1
L CVE-2026-42501	<12.4.3-r1
L Improper Encoding or Escaping of Output	<12.4.3-r1
M Link Following	<12.4.3-r1
H NULL Pointer Dereference	<12.4.3-r1
H Allocation of Resources Without Limits or Throttling	<12.4.3-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<12.4.3-r1
L CVE-2026-21726	*
L SQL Injection	*
L Integer Overflow or Wraparound	*
L Use of Incorrectly-Resolved Name or Reference	*
L Allocation of Resources Without Limits or Throttling	<12.4.2-r1
C CVE-2026-27143	<12.4.2-r3
H Access of Resource Using Incompatible Type ('Type Confusion')	<12.4.2-r3
L CVE-2026-33816	<12.4.2-r4
H Untrusted Search Path	<12.4.2-r4
H Incorrect Authorization	<12.4.2-r4
L Information Exposure	<12.4.2-r4
H Improper Certificate Validation	<12.4.2-r3
M Cross-site Scripting (XSS)	<12.4.2-r3
L CVE-2026-32280	<12.4.2-r3
H Improper Certificate Validation	<12.4.2-r3
M Link Following	<12.4.2-r3
H Incorrect Authorization	<12.4.2-r3
H Allocation of Resources Without Limits or Throttling	<12.4.2-r3
M Allocation of Resources Without Limits or Throttling	<12.4.2-r3
L Uncaught Exception	<12.4.2-r2
H CVE-2026-27877	<12.4.2-r0
L CVE-2026-33375	<12.4.2-r0
C Improper Input Validation	<12.4.2-r1
L Improper Authorization	<12.4.1-r1
L GHSA-6g7g-w4f8-9c9x	<12.4.1-r1
L Cross-site Scripting (XSS)	<12.4.1-r0
L Improper Certificate Validation	<12.4.1-r0
L Directory Traversal	<12.4.1-r0
L Direct Request ('Forced Browsing')	<12.4.1-r0
L Improper Certificate Validation	<12.4.1-r0
L Time-of-check Time-of-use (TOCTOU)	<12.4.1-r0
L Untrusted Search Path	<12.4.0-r1
C CVE-2026-1229	<12.4.0-r1

Vulnerability

Vulnerable Version

Resource Exhaustion