grafana.src vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the grafana.src package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Information Exposure	*
L Resource Exhaustion	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Use of Insufficiently Random Values	*
H Resource Exhaustion	*
H Improper Validation of Syntactic Correctness of Input	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Input Validation	*
H Reachable Assertion	*
H Reachable Assertion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Arbitrary Code Injection	*
M Improper Authentication	*
M Improper Authentication	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Direct Request ('Forced Browsing')	*
M Direct Request ('Forced Browsing')	*
H Improper Authentication	*
H Improper Authentication	*
M Authentication Bypass	*
M Authentication Bypass	*
M Incorrect Implementation of Authentication Algorithm	*
M Incorrect Implementation of Authentication Algorithm	*
M Cleartext Storage of Sensitive Information	*
M Cleartext Storage of Sensitive Information	*
M Information Exposure	*
M CVE-2022-39201	*
M Information Exposure	*
M CVE-2022-39201	*
M External Control of Assumed-Immutable Web Parameter	*
M External Control of Assumed-Immutable Web Parameter	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
M Improper Verification of Cryptographic Signature	*
M Improper Verification of Cryptographic Signature	*

Vulnerability

Vulnerable Version

Information Exposure