grafana-fips-13.0

Direct Vulnerabilities

Known vulnerabilities in the grafana-fips-13.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Input Validation	<13.0.8-r0
L NULL Pointer Dereference	<13.0.8-r0
L CVE-2026-94447	<13.0.10-r1
L CVE-2026-94444	<13.0.10-r1
L Information Exposure	<13.0.11-r0
L CVE-2026-78660	<13.0.11-r0
L CVE-2026-78659	<13.0.11-r0
L CVE-2026-78663	<13.0.11-r0
L CVE-2026-97032	<13.0.11-r0
L CVE-2026-78669	<13.0.11-r0
L CVE-2026-78667	<13.0.10-r1
L CVE-2026-56857	<13.0.10-r1
L CVE-2026-97031	<13.0.10-r1
L CVE-2026-56866	<13.0.10-r1
L CVE-2026-94440	<13.0.10-r1
L CVE-2026-94439	<13.0.10-r1
L CVE-2026-97030	<13.0.10-r1
L CVE-2026-94448	<13.0.10-r1
L CVE-2026-13719	<13.0.10-r0
L CVE-2026-13720	<13.0.10-r0
L CVE-2026-56851	<13.0.7-r2
L CVE-2026-81841	<13.0.10-r0
L CVE-2026-81842	<13.0.10-r0
L Resource Exhaustion	<13.0.10-r0
L Improper Certificate Validation	<13.0.10-r0
L Race Condition	<13.0.10-r0
L CVE-2026-15815	<13.0.9-r0
L CVE-2026-76154	<13.0.9-r0
L CVE-2026-42129	<13.0.2-r0
L Improper Preservation of Permissions	<13.0.9-r1
L Improper Validation of Array Index	<13.0.9-r0
L CVE-2026-12704	<13.0.8-r0
L Improper Handling of Case Sensitivity	<13.0.8-r1
H CVE-2026-14199	<13.0.8-r0
L CVE-2026-19475	<13.0.8-r0
L CVE-2026-78662	<13.0.8-r2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<13.0.8-r2
L CVE-2026-56855	<13.0.8-r2
L Resource Exhaustion	<13.0.8-r1
L CVE-2026-19197	<13.0.6-r0
L Resource Exhaustion	<13.0.8-r0
L NULL Pointer Dereference	<13.0.8-r0
L NULL Pointer Dereference	<13.0.8-r0
L CVE-2026-56854	<13.0.7-r2
L CVE-2026-9029	<13.0.2-r0
L CVE-2026-10601	<13.0.2-r0
L CVE-2026-17183	<13.0.7-r0
L Allocation of Resources Without Limits or Throttling	<13.0.7-r1
L CVE-2026-56865	<13.0.6-r2
L CVE-2026-56864	<13.0.6-r2
L CVE-2026-56859	<13.0.6-r2
L CVE-2026-33818	<13.0.6-r2
L CVE-2026-56862	<13.0.6-r2
L CVE-2026-56853	<13.0.6-r2
L CVE-2026-56858	<13.0.6-r2
L CVE-2026-56860	<13.0.6-r2
L GHSA-259r-337f-4rfw	<13.0.6-r1
L GHSA-r277-6w6q-xmqw	<13.0.8-r0
L GHSA-hrxh-6v49-42gf	<13.0.4-r2
L GHSA-gcjh-h69q-9w9g	<13.0.4-r2
L CVE-2026-56852	<13.0.4-r1
L CVE-2026-46600	<13.0.4-r1
L GHSA-mpwr-8vm7-h73f	<13.0.4-r0
L CVE-2026-8595	<13.0.2-r0
L CVE-2026-8609	<13.0.2-r0
L CVE-2026-33382	<13.0.2-r0
L CVE-2026-39822	<13.0.3-r1
L CVE-2026-42505	<13.0.3-r1
L Uncontrolled Memory Allocation	<13.0.2-r2
L CVE-2026-42127	<13.0.1.01-r0
M Insufficient Verification of Data Authenticity	<13.0.2-r2
L Improper Authentication	<13.0.2-r2
L Improper Handling of Case Sensitivity	<13.0.2-r2
L CVE-2026-21728	*
L CVE-2026-42504	<13.0.2-r1
L Improper Certificate Validation	<13.0.2-r0
L Missing Authorization	<13.0.2-r0
L CVE-2026-46595	<13.0.2-r0
L Integer Overflow or Wraparound	<13.0.2-r0
L CVE-2026-39824	<13.0.2-r0
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<13.0.2-r0
L CVE-2026-42507	<13.0.2-r1
L CVE-2026-27145	<13.0.2-r1
L Improper Certificate Validation	<13.0.2-r0
L Improper Verification of Cryptographic Signature	<13.0.2-r0
L Incorrect Type Conversion or Cast	<13.0.2-r0
L Out-of-Bounds	<13.0.2-r0
L Cross-site Scripting (XSS)	<13.0.2-r0
L CVE-2026-39821	<13.0.2-r0
L Missing Authorization	<13.0.2-r0
L CVE-2026-46598	<13.0.2-r0
L Improper Certificate Validation	<13.0.2-r0
L Improper Restriction of Rendered UI Layers or Frames	<13.0.2-r0
L Improper Restriction of Rendered UI Layers or Frames	<13.0.2-r0
L Resource Exhaustion	<13.0.2-r0
L Improper Restriction of Rendered UI Layers or Frames	<13.0.2-r0
L Deserialization of Untrusted Data	<13.0.2-r0
H Off-by-one Error	<13.0.2-r0
H Symlink Following	<13.0.2-r0
L Cross-site Scripting (XSS)	<13.0.2-r0
L Integer Overflow or Wraparound	<13.0.2-r0
H Authentication Bypass	<13.0.2-r0
L Uncontrolled Search Path Element	<13.0.2-r0
H Untrusted Search Path	<13.0.2-r0
L Resource Exhaustion	<13.0.2-r0
M Out-of-bounds Write	<13.0.1-r1
H NULL Pointer Dereference	<13.0.1-r1
L Cross-site Scripting (XSS)	<13.0.1-r1
L Improper Encoding or Escaping of Output	<13.0.1-r1
L CVE-2026-42501	<13.0.1-r1
H Double Free	<13.0.1-r1
M Link Following	<13.0.1-r1
L CVE-2026-42499	<13.0.1-r1
H Allocation of Resources Without Limits or Throttling	<13.0.1-r1
L CVE-2026-39825	<13.0.1-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<13.0.1-r1
C Improper Input Validation	<13.0.2-r0
H Incorrect Authorization	<13.0.2-r0
L Information Exposure	<13.0.2-r0
L GHSA-xmrv-pmrh-hhx2	<13.0.2-r0
L Uncontrolled Memory Allocation	<13.0.2-r0
M Cross-site Scripting (XSS)	*
L CVE-2026-21726	<13.0.2-r0
H Integer Overflow or Wraparound	<13.0.2-r0
C SQL Injection	<13.0.2-r0
L Use of Incorrectly-Resolved Name or Reference	<13.0.2-r0

Vulnerability

Vulnerable Version

Improper Input Validation

<13.0.8-r0