{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cd6aa24f-6636-56e9-9d32-a35bc3f7a096", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "github.com/grafana/loki", "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4", "version": "2.8.3-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki", "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5", "version": "2.8.3-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki", "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6", "version": "2.8.3-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/argoproj/argo-cd/v3", "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "type": "library", "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "version": "3.0.4-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/argoproj/argo-cd/v3", "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "version": "3.0.4-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/argoproj/argo-cd/v3", "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "version": "3.0.4-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/argoproj/argo-cd/v3", "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "version": "3.0.4-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.3", "version": "3.1.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.4", "version": "3.1.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.2", "version": "3.2.0-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.2", "version": "3.3.0-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.3", "version": "3.2.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.3", "version": "3.3.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.4", "version": "3.3.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.4", "version": "3.2.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/loki/v3", "purl": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.5", "version": "3.1.0-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "version": "11.5.0-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "version": "11.4.0-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "version": "11.3.0-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "version": "11.2.0-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "version": "11.5.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "version": "11.4.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "version": "11.2.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "version": "10.4.1-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "version": "11.3.0-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "version": "10.4.1-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "version": "11.5.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "version": "11.4.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "version": "11.5.0-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "version": "11.4.0-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "version": "11.2.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "version": "11.3.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "version": "11.4.0-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "version": "11.2.0-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "version": "11.3.0-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "version": "10.4.1-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "version": "11.2.0-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "version": "11.3.0-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "version": "11.5.0-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "version": "11.5.0-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "version": "11.5.0-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "version": "11.5.0-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/grafana/grafana", "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7", "type": "library", "bom-ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7", "version": "11.3.0-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.12", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } }, { "name": "github.com/minio/minio", "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13", "type": "library", "bom-ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13", "version": "RELEASE.2025-10-15T17-29-55Z-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-36156", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4" } ], "bom-ref": "urn:uuid:c4cb554e-452a-57c8-ba1b-7a3ccfe942fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-36156 is fixed in version 2.8.3-tuxcare.4 of github.com/grafana/loki." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4" } ], "bom-ref": "urn:uuid:be9bbc3b-fb05-5e48-b346-1319a85fc2af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.4 of github.com/grafana/loki." } }, { "id": "CVE-2021-36156", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5" } ], "bom-ref": "urn:uuid:775b11c1-ca91-5fec-aaf3-17bc0a0f8dd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-36156 is fixed in version 2.8.3-tuxcare.5 of github.com/grafana/loki." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5" } ], "bom-ref": "urn:uuid:fb8a4103-7784-5808-87c1-967c8fff5d0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.5 of github.com/grafana/loki." } }, { "id": "CVE-2021-36156", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6" } ], "bom-ref": "urn:uuid:e2c0217f-e4db-5e3e-ac22-2a8cd9375102", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-36156 is fixed in version 2.8.3-tuxcare.6 of github.com/grafana/loki." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6" } ], "bom-ref": "urn:uuid:e7dab702-12e7-59d5-b63c-9f71b1e7b8c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.6 of github.com/grafana/loki." } }, { "id": "CVE-2022-1025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:68a772e7-8eff-597a-a989-8b96ee8cc078", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24348", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:084c88f5-852a-5040-b28d-92e6a7e7f1e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24730", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:515caf86-cebb-54c9-abb4-d2759d2ead45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24731", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:edee6849-5339-5636-bff5-37c8ffa6b506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24904", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e8633a68-e314-562b-aabd-b3724c9ba1d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24905", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e3866b25-206f-5cb0-a72d-8f53dcf5f51e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-29165", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:86584ade-1328-5b36-81dd-6c4df1208a72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31016", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:606433ef-b434-5ae0-9c0d-ade112c9b655", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31034", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:4b2bbfe7-93cc-50a8-8898-423222d7d111", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31035", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:69f7a827-dff0-58ac-96d0-b53ab2700c47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31036", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:a346f39d-6da9-5cbe-a08a-0ba4f7b2fdc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31102", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:f8cec35f-c74b-5dad-ae4f-9d9b90750db6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31105", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:14847fb6-28fb-5d76-94aa-fe7ca046000c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-41354", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:27caef5e-7a9d-550b-885d-85724398ee41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22482", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5e007437-1882-5c9c-a4e4-ed976428c247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22736", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:330af323-e172-526a-a728-c4a882e1d126", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-23947", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:673b6172-d8fe-5864-80ea-98039f9d34d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:17797497-4bd2-5db3-8e2b-8625e437191a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40026", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5afe9159-3679-565d-b32b-eee5f8f9ee72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40029", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:b8a1ee8f-452d-588c-ad65-d1ffbf17b39a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40584", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:870e78e4-06a1-5c53-91a9-cf25d5d3e02c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-50726", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:f24d1eba-4d05-5c4b-9f09-9af934108923", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-28175", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:770995b9-1749-5791-b9b5-db178ea8e104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31989", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:f863f1b2-b0ec-591d-9618-e140101bf45c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31990", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e02b7491-e5c1-550b-bddf-c57dd9ba4314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-32476", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5fcdc704-0d22-5120-83f3-da50b94629b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-36106", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e38472f5-0a68-542a-ae44-83706c98e8af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-37152", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:53db34ce-402e-5191-bc63-74ad2a0c23b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-40634", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:2205a14e-b6d1-514e-acd2-92d0df317ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-41666", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:3ec9b0c0-d4e0-519e-a64e-f87d2e05703d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-23216", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5c9493a8-d22d-525d-bafb-518c2d63bafc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-47933", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:ff01f1d5-e476-5b0f-9986-2787e8d78a33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55190", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:efa12940-6d96-5486-b2e5-db8cd340beec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55191", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:9afd3e66-1fd3-5779-9175-c44206b55c10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59531", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6d7fdef6-cb4f-5926-bc70-428ebab36227", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59537", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6fb359c0-42a2-5bd1-bfd4-959d240d34ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59538", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e1d497a7-7a1e-5f7b-a4b1-2b327bbb8a6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-42880", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:c5241cfa-91c1-5208-91b5-e43d758bdd5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45737", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:823a4c00-b84c-57ed-8424-40ecb1a4894a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45738", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:aa4ad084-edb2-593f-813e-5bb95959be2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-55797", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:a4eb3b16-2e5d-55f7-b8e1-7c7c17228839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-77459", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } ], "bom-ref": "urn:uuid:b8d8f9b1-c010-5476-ab83-9fefe42f1d57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-1025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:7ed30073-0c29-5bf4-a84c-695db1b78a0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24348", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:8d87fe2d-390f-5770-9861-02313443b0a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24730", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:66af9813-fe42-50cb-b4fe-a3414345ab4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24731", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:6e41eab6-c868-51be-af8e-44a9f9d54a1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24904", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:36a3291e-a6ef-560b-b6d1-739df9b98970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24905", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:293a3086-854d-5c5e-9e70-601560b229f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-29165", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:e3a30be2-02b5-5a54-9428-9416515acb4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31016", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:87d51238-c2a1-5385-9995-d687b5c15942", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31034", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:43996204-5ad1-56df-ac64-59a0e831317d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31035", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:2c90e67c-8cec-51ab-99c1-b2ce4a25e7cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31036", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:108c439a-f9d2-5967-88e2-4d7bddc0f018", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31102", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:49596bd6-b38f-513d-90a7-bb316532af6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31105", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:025fae07-b40f-5970-84fe-0501fec480dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-41354", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:55a67778-1790-5ebd-9efe-4eadf78fde1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22482", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:f39b8d88-f66a-59f6-8178-49e48d2b9ee1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22736", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:09e5c634-fff1-5ba6-9c70-fc703e1a7f5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-23947", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:4a3d0b8b-3dcb-5ad4-a318-b33b258118fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:57a4660b-7fa5-5043-b010-e643da9c9c7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40026", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:87c549e5-9420-52ca-9d9d-b47ad442e580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40029", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:0424f55f-d96a-5012-a541-d0c1cf2243d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40584", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:571b9d2c-a9fe-57fe-9eb2-42172daef546", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-50726", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:26c338b8-6fdf-5af1-bc98-7de1dd02219c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-28175", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:e29786ee-db47-5a9c-b3b8-607f5f9a4ff9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31989", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d25f87b6-7511-59c9-b05c-6983a5fd36c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31990", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:ffeeb634-1a4f-5c66-818d-b13a03aa38c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-32476", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:9164471a-e6e5-573b-848e-d55d5b2a6db6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-36106", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:b8f38e36-3966-57e5-8f89-386b4dd4ed59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-37152", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:8df589b9-4135-5b05-846c-67f98fe3640c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-40634", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:f8cac442-5ee9-50ee-9a7d-98f5727d688b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-41666", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:3460d0f0-52d6-500c-99d2-8d2236ae3369", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-23216", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:70506869-696e-5aef-8c13-ea5071a5e852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-47933", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:498acf82-21f9-5bdb-8acd-a58fda0cf224", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55190", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:dd61335a-0939-5a35-bb13-0b10af013ae8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55191", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:8ad1b5f4-7a74-5447-8662-22a453a830de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59531", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:eacb49a1-e65a-59be-aa9d-3cb666d798e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59537", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:a5dbc59a-25f6-51d5-ad27-1ba9bac19425", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59538", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:c3b39b78-5712-5c9f-9f38-34649d27958b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-42880", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:dacd5ede-a729-552c-a430-455a65c14ade", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45737", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:62a8d290-9415-548b-9876-0012242560a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45738", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:205eda60-2760-5dd3-af65-4828996b3f9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-55797", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:199a67a3-e72d-5ad7-9307-b4a339d15f82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-77459", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } ], "bom-ref": "urn:uuid:9115bf08-aa01-590e-ba3b-c91ac317c407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-1025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:57e7995d-a5a0-5384-8fbf-6bb1a871ee92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24348", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:02583d16-b658-5d3f-b479-626c09c18be8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24730", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:82be28bd-6ff7-5c5b-b29b-0107f3956827", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24731", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:5a9f6e87-fb54-5c88-a57b-381b626f2003", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24904", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:ce7a2872-fa74-5522-b0d0-9ac7a3a25235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24905", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:cf4871cd-53dc-5376-9f07-221e6b292d55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-29165", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:7a4e0ac4-9f98-5bee-acc9-aee7db151e41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31016", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:e9e4727c-8089-53d9-b4c5-3f84210bc99a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31034", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:ec7391d7-14e0-5aad-ade0-8bbf70a08231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31035", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:a9876507-6f42-50e4-b1f2-2adf6dfe8b19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31036", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:aeb0c22e-248a-5f98-96a6-a2d48699df7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31102", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:2560f5cc-e4fd-5257-b1cd-43ac9fe75d99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31105", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:834e875b-2e66-516c-bc1d-d7c7fb4f255e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-41354", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:55256929-d04d-5744-b93f-6faa6e0550fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22482", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:454df8cf-8022-5883-9b24-037b77db121d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22736", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:acbb71f5-b11e-57c2-9008-92ac0e24d8a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-23947", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:67850188-d027-539a-8ed9-e510fb288b70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:25654ca4-386f-504a-9c6d-540f361f8c3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40026", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:8af95f85-5378-5a62-82f8-277b7a9f0233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40029", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:9c1a9c6e-81fb-5aad-85f1-f3cc2401bf6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40584", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:ae8f1b65-c94c-564c-babf-6df3493c0919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-50726", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:59b7fcbd-3a4c-5b44-916a-b17a49ad9791", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-28175", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:4986ab74-0a36-55ec-a64d-ae44533b3a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31989", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:88379708-1ba5-58e6-aed5-42c1a38c677f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31990", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:8f1f20f9-ee8b-53a1-91e8-1c11d65fa97b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-32476", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:fb4889fc-6937-56e4-8098-9aa227baa764", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-36106", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:54ed0113-673c-59fc-b440-0fb9bee54f39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-37152", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:510d71ef-a48f-567d-bf67-1327bcddc2c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-40634", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:afbbf537-5068-5c16-8e01-5183e50db9a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-41666", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:abfa2323-bc0f-56d4-9feb-93a5a321d65f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-23216", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:a07fab8f-0034-583a-b62f-744dd405aa96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-47933", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:ad1c4dda-06d1-5f9c-98ea-9990e853ec1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55190", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:40416a6c-023f-5b61-8bfa-86088c17a981", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55191", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:ee9cae84-802e-5088-8d89-ac7a765cfe22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59531", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:52304979-38bc-5ce5-a2e0-084be2413454", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59537", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:7789f530-3bd6-5de4-8906-f202a99ac8e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59538", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:a1354eb0-3898-5306-b5b8-7c6cf635ac67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-42880", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:1855f27b-1f22-5523-9772-04000cb43a43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45737", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:77fba245-821d-54b8-b846-bd01138686bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45738", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:76f57ed4-4ddc-51c1-8963-424bca3a61f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-55797", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:6b0d8800-ae01-569b-a5e1-c58dbac13627", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-77459", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } ], "bom-ref": "urn:uuid:5d498654-3404-5517-b1f4-090012a1a634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-1025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:e7fa2c0c-cd09-5e00-95d8-85c09d8d2c26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24348", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:f9287752-c6db-59d3-acdc-ca4e4aec3a57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24730", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:2df677f5-23d3-521b-87be-9ca7e6e68bdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24731", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:8892172e-be28-5104-a6c0-80ed3647ef3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24904", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:88b0ec7a-a391-5d13-9191-aab3f78aa37b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-24905", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:f24af248-9e71-55b0-b235-2332fc573115", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-29165", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:5e0818d1-37e2-50ba-b4bd-540f070a132f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31016", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:e0058c1c-78c7-5731-bbe3-4f0ea53e396c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31034", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:23424af1-a0ca-5826-8b6b-ea06a85466bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31035", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:cdb26e20-ef07-534e-81af-af02ed181b8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31036", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:5466e776-2b19-5561-944a-aa948502fd29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31102", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:d29f26c0-92d8-5acf-9b8a-f2ccc5c6482a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-31105", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:146e5bf4-bc72-5330-a705-2d22a8595391", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2022-41354", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:7a2146db-ea1d-5399-809c-a48a7d0e2e9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22482", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:252f0a71-0fb3-5046-9f38-f866f9c2e7d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-22736", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:413aff9f-7727-5b8c-82f9-b5daa2b54814", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-23947", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:24b60c23-d78f-54d5-bbe6-d530f33fe357", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40025", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:a1db4809-c6cd-5129-b7af-4cf403fe9a94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40026", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:0a2a0150-3576-5100-8820-fd23b4a0efc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40029", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:bf388dc9-a934-5445-bd5d-15e03610af71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-40584", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:63223aaa-354e-55c5-857d-f57a9aaffb43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2023-50726", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:fb8fd7a9-3a56-585c-8edd-4d321936a1ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-28175", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:3c1180d2-75e8-5c9f-9b1c-8d614a847de9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31989", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:42aedc0e-8a39-51ad-852d-86289d8319ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-31990", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:926c6398-0e83-5ec3-b4d7-7ae463bc1126", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-32476", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:ae56b127-90b9-576c-8342-f5447885dcd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-36106", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:eae7040f-64f2-542a-8316-2c994bba63a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-37152", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:89ef7ce4-90fd-50ee-9976-592625cfc680", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-40634", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:694891ca-11eb-5046-bb70-f080505d26db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2024-41666", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:337baac4-9275-5db0-b210-fb651540675e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-23216", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:2ddd8af2-9996-5a1b-8aba-a7e33d2e56a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-47933", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:3a485cad-6288-5fb9-bec8-49a68d947187", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55190", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:cfaa58ec-28c5-581a-8361-f97d987548f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-55191", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:68432ff1-d519-5075-99da-edd1bf6d6543", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59531", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:9d7ba645-ae55-55d9-b9fe-4976f8110eda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59537", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:0f19131b-f27e-5456-b276-ae481549db1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2025-59538", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:f609baf8-87c5-5fab-878e-d9a65026101d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-42880", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:5e45c02a-33a9-5504-99a3-a0c8c450a76f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45737", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:f03672d2-adaf-575f-a34f-0efd9ce0ac15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-45738", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:50e78601-bfd5-53ea-b3f7-72f69b0b0e5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-55797", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:f0fdef93-8ef9-58c2-b7d3-657bb566bcd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-77459", "affects": [ { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } ], "bom-ref": "urn:uuid:f714d702-186a-51e2-ae07-d460611889a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.3" } ], "bom-ref": "urn:uuid:cf0583f2-7562-524a-8f1f-7826e6a6c37f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 3.1.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.1.0-tuxcare.5." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4efb5b85-49b5-5037-ad84-67223132d7fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 3.1.0-tuxcare.4 of github.com/grafana/loki/v3, and is fixed in 3.1.0-tuxcare.5." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:1e0442f1-ba1b-5d4a-99e3-23c4386513c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 3.2.0-tuxcare.2 of github.com/grafana/loki/v3, and is fixed in 3.2.0-tuxcare.4." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:980a568d-2f9b-5108-b01a-a15856c3dca5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 3.3.0-tuxcare.2 of github.com/grafana/loki/v3, and is fixed in 3.3.0-tuxcare.4." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:69c41223-bfdc-5960-a8c1-21a8e84bca1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 3.2.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.2.0-tuxcare.4." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:bc2d2e8c-e2ba-5a31-bbc0-7850a6dd6663", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21726 affects version 3.3.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.3.0-tuxcare.4." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:89631e84-129c-5268-abc2-d053509b71a4", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.1. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:a2f20a1a-46de-5ee4-a5b1-37194027fade", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:512745da-b6fc-529c-8812-8169352ba7a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:a5f4ea68-a466-55b4-ae93-6742fa5d686f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:5cb96b41-a1ba-5219-8644-f5e61a10c84e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34204 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:24a4fdbc-d84b-5339-833d-6b0a2b89cbea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39414 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:76772314-d67a-55df-b303-5fd5c9ada3bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:313e308f-8082-50f0-983d-882fe5c48f8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } ], "bom-ref": "urn:uuid:cf9c0641-09dd-529c-b01d-10e916213b1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:dbfb142a-d4eb-5444-9cf1-4f2e7e68c3e6", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.2. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:0baccbde-714c-51a8-9598-7b1e17764a57", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:57048029-141a-5f8b-98d1-4c05cb151043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:5968b063-6d33-50d9-bc8d-f29c351e58f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:1cb08387-ae53-5eee-9d4f-b4d62e35b343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34204 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:dcff1a8c-e9fa-58d9-bec0-8325d9469291", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39414 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:ff5ef666-0b96-5399-b686-867288d516b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:af0d6132-b678-5c73-abef-94ccaa54eb43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } ], "bom-ref": "urn:uuid:ee8a02b4-06bd-58ae-a88b-d69a3998e815", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:9aa5dde3-f279-58d5-b18a-3c999dbcc0be", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.3. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:0c3313f3-e569-548a-a20f-ffb710282aa4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:1691c24c-7468-513a-86ac-081905576b4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:5df6eac5-8680-5ed1-9055-fd1c95128d00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:ad9814f3-e0b0-5a04-9703-6b604f683a62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:e689fa4c-a630-5731-aaa9-6699e441d030", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:0f9676bc-f80c-5015-8d97-f6425de2fb55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:4adbf3bc-198c-5d5e-9dfb-1976b4f65a57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } ], "bom-ref": "urn:uuid:0f5efeec-4974-5414-899c-ffa54ad05aba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:103f3e99-dbcf-5420-87e1-4548eb22babd", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.4. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:68bd32d6-da10-5888-ab66-dc764edf953b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:7ef48780-1c58-5531-99b0-25c6e028a8b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:f16f0e42-bb44-5f1e-a1c0-ba472aaba8af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:99901f3f-98d8-52bc-8ee2-e8df138641b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:51620059-9a38-5a23-9f68-2c3fcd7f8c14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:235bb88c-1795-5178-8514-43de70ed38ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:5362cc3c-fd61-5da9-9b0f-4b90ca44859b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } ], "bom-ref": "urn:uuid:ca188fb7-190a-588c-ac36-25a263728f91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:ebd3d33f-f9e9-5391-bed1-6eb5a6e66dcc", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.5. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:cda97764-eb7b-55c7-8a7b-69417626fcea", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:66a76e71-97be-5bd4-8efb-d68dc27ea173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:e2ed289b-c295-5715-b10c-9fb5403e6ec6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:48cafce1-2ffa-5bee-ad70-40aa1fa86ada", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:8b141e5b-11ee-517d-9264-cce3e44ed098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:07851771-0cf2-5094-8e04-0f980cd47fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:c6790a55-d83a-5cac-af19-935c5d36f18e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } ], "bom-ref": "urn:uuid:f98d1152-c68c-5880-b2d7-1daace147510", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6e9beadb-d580-52f1-937d-63ea0caae59c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21726 is fixed in version 3.3.0-tuxcare.4 of github.com/grafana/loki/v3." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9b3c5762-5fd5-5e33-924b-108492d4591f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21726 is fixed in version 3.2.0-tuxcare.4 of github.com/grafana/loki/v3." } }, { "id": "CVE-2026-21726", "affects": [ { "ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0820d3e8-7fb4-5ba7-bee4-86f6ed9d22e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21726 is fixed in version 3.1.0-tuxcare.5 of github.com/grafana/loki/v3." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b0cec206-eeec-56e1-b929-a7b52f9d3dfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:101e0d2f-310d-557d-8a0c-b1bcbb5bd5e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:29101766-e0d7-532e-8fd8-c95ae9e2a7ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:18b717b4-ad6e-53dd-9272-44d6837f3094", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0deb4fc2-123b-5750-8515-c43034e74476", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9222ebb6-eeca-53c9-bf86-32db8b8e0f70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:98ef5d02-a0b0-55c7-aaee-e0e33542d881", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:261b9a3f-c327-5633-a5e9-8311264c0cff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:23a99bcb-8284-53f1-89d6-141f6ce6694c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b946d79b-e5fd-5edb-931f-b94ed34ad77c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4f51d770-4aa3-50e4-978c-5be220122b85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:24e01320-9ce0-578d-9cf7-ad2c3f17af68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:cb723bbc-5f0f-580f-8229-7b18cb099942", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:802e5739-6a3f-5836-b039-00409bcd70fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:de944529-109c-5fd3-b389-386b88156e3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:23ac893a-29eb-55bb-9495-d6243fd0c7b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:ebf00623-95bb-55d6-a1c7-147aee88368a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:7c9d9bfa-53ab-56d6-9b70-5e5c74721d6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f0ec29bb-5dfd-515b-850c-e468e96cb55f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:e25c3c85-79e8-5ad8-bf2f-039627760faa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:c4d11b6b-0c36-5e8b-94d5-1f85812f8242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:74b2b3da-b098-514c-9474-0e634b447a36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a2efa543-ed32-5f0d-a5aa-42e9c2e783ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4a253ac9-37bc-5a51-95bb-4888e3ff2b92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2ead1c63-de55-56a1-b7c3-bfe11c1a8297", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3d5997ca-b5d1-56c6-ab1b-c8a771f3dd4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:24c1ba43-1bb9-5bca-8c23-7ba8b0b78caa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.4." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:124060ce-e0a8-577b-bfea-294df84c7562", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:dea42c6c-5cb5-5a7e-ad29-fa121f271ea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:ee233384-b302-50e2-8113-2d12fcc664df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2e28de23-17bf-5273-9a25-b23ccdba19ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:ced0ac92-6407-57b1-83ec-06dd26c137cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:34ef4a90-3c1b-5102-970b-930cbeb51ef9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3f18acf1-fcd5-5747-a477-2bfcf64e5486", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:e6b5f1af-9961-55f6-abd6-21ab878eefeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-4123 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.3." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f5aa00bb-eea9-5f08-b87b-c438320baa63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f5687cc7-1683-5c1c-b350-ee2bf1389a2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:adfcfc6d-e5a9-5669-a576-0e70f8146e6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0e4f2c38-f783-533b-9e64-f4ef4052f0e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:20cd677a-618e-5252-9586-d544f1eccb20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:5524e1dc-23cd-5ed0-85f2-eacc073925a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:27fe3afb-77b5-58be-830a-6154f1cd3b8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:5dd4d1b7-a466-5ef5-a6c4-1c22c3742381", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9d466f9d-2cb4-5e6d-ae4e-0d0fead9516c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:ed16cdfb-9eb5-5523-ba29-743fd5c1fa2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:45936a9c-2632-5399-a644-00f343ef0873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:8150a6db-ac3f-5d49-8d87-5033fc2c937a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:53d22ae8-107a-5535-b337-ae795265fd49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:7b46a4ea-5893-5ab3-bce9-6496032af94d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4be2812e-a398-5840-882f-367bbaf0e7a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } ], "bom-ref": "urn:uuid:6344d274-1f1e-5865-a4b3-6b089c009f92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:937df195-1cfb-5512-a000-566bf5487566", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2e8ec0ad-7fa9-5d45-90f1-ba2c8657fa13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:7c2abd6d-0e03-5ea2-9931-3cc48d8211a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:1fcbc9a2-456e-5b8a-99f1-6881630fa263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4775faeb-fb78-50b6-86b9-d8b3c84adb9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:78713bde-ec07-5def-bb06-0ab6233904c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:5d6b3cb2-e533-5e8d-90d7-5365647da634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:e0ef6403-11d6-53da-953f-69d694a5328e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:1f7b6877-e87a-50df-b789-257b772fe60a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:dc82d72a-fbb0-5d79-aaff-4f7ba50a9984", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:90ab1c1f-8356-526d-a518-4d21d292d9bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:7cea4fe9-9d9f-5b96-b684-3b785d4ca116", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a989992e-d9cf-5f06-aa9a-281a16aed28f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:e63131bb-8653-5198-a235-6b45b722ac21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a6bf594a-f734-5dcf-9e64-ed78ba0978b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:552164b2-e284-5d88-809e-4c8c14f0faba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b6059bd5-fe81-51fb-935c-a81040188ca7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:81c0df8b-4bd6-56a0-97d5-245a9c1173c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f0f6118f-1128-53c6-aa0e-ebf7dd34694d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:d43c8454-f425-5861-a4ca-772a7ad009dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9800bdb9-1ff1-58d8-8ace-e92b52682159", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9662b03c-efba-5d57-afe3-0e7586f700d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f594d98d-58a4-5d18-88af-6675db7b0570", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:52cb15f3-f635-5e93-9448-ca6921e40206", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:96d51e73-59e7-5b17-9984-51717b6930d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f2d16a58-9f96-521c-890d-dc6f14460b87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9234d82d-ceab-53b5-a710-e80993c37df4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:66495416-7ca0-53bf-ae03-93cc25b48dcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:6039a5c3-649e-57d8-ab59-0660e6c1ee61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:58d79c67-ff9f-5512-856c-5957467dd794", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:86b1a7a7-09ab-5c1b-b3cc-49d7430ae3e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:fa29635b-22c7-5fdd-b50f-f9339b4487e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:8db20a06-fce1-5d45-b1cd-b72f61e5c244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-4123 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.3." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:c1a48b3d-e99c-5a68-b3be-2450c441f3a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4851d65d-a80e-5fb3-9a23-f2dd75252407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:125d69f6-4452-518f-96c7-d6a398644045", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:363bb8bc-17b2-5047-9b37-c4339287294e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9ff8faff-818b-5894-a266-82709338d24e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:659d6221-ea95-5d66-a1e9-bf229762114b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:1023bf92-3208-5972-a4cd-676bd3704c31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3c35cabb-9832-5ae9-b12a-9336cbd4cd54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:14ac77c7-78f9-5891-94b1-c4bd76ce5cc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } ], "bom-ref": "urn:uuid:36bc7ab8-15c2-5c27-bf0c-c595e6b46dbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:c75a950c-6e5d-5996-90c6-7bf7340f5331", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:123e5278-3dcb-522d-9fd3-26a75138cb8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:96acacca-92ce-5c8f-ae07-1efea78f20d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:41a0a167-aea8-5290-96dc-2fd42dfdc82e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:eb760daf-9b60-5485-8862-b3d3fd01bf77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a5bb5a66-de00-506d-bb66-72f827ea82cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:39638365-002c-5979-811d-45f434f49d94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f504f47c-f528-5359-ae17-c96ac96e740c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:deb02b73-1c1d-56b8-8c16-b20188455496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:aec3976c-3f5e-5380-b7de-086fba7a5b5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:c5434228-3285-55bf-b2df-ca4d17baac93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:211b9eea-557e-5cd4-acd7-017441350983", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:bbbc46d8-c457-5ed4-b974-ecfced3fbbaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3a87f4be-7de6-5d6a-b2e1-43665fa53ea0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4e32efae-bd6a-512d-9bdd-8b1270b87d79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b36a9de6-a853-5d00-8bad-4c0d319db9cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:5765600e-666a-50cb-a606-dfbe3fed264d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:08a94e18-fd67-5176-b67b-19348ac28230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2cd96fa8-231d-55fc-8513-497bce954a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:de28042c-8550-528c-ae52-7f709d5f047f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:53fb1695-077e-55ab-bb14-18d5e7176387", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:675f3378-953e-5131-acdf-f69c77ac7fb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4edfbe59-96ec-58ec-8d09-a535141f1fd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:ace80d07-9e77-5b15-82f0-9644d146e84a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0a192ae4-07b1-5276-bf6f-f61eba7ac1d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:de4bc49a-474c-5ee7-bfa1-ac03f75c50ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:25a96bbc-4109-51cc-8dcf-0b31a2a7f7d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:82705026-6216-5b5b-94f6-a35cc10ca4cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3d9e2d54-3f75-5917-b399-60b414b83e3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:adb08048-56b2-5519-9dff-075f48137fd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:6eb65a18-e98e-5f1c-bb07-945b8342cd0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:8558bbe3-1d1b-5fa5-b7fc-47e8c9f83be1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4cc20f0c-b455-5bfd-a847-9e71256c38fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-4123 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.3." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:84069de2-8b69-5ce0-a821-9c2b65fd83b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2281c8b7-e913-5b7f-8399-55e14c9e8a09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:73bec53d-d219-5892-b8b9-386659f5c08f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:6518db58-f5d4-5af8-937e-e50c63a8a645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2fb2b99f-b87b-5618-9620-c3ef0cd7b6d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:8d67e90f-4646-581f-a7be-3b66470150ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:63fe8413-bcf7-5597-9afb-476712c5d856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2f0fcabe-2536-542a-8711-0f4524053baf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0d08e18e-2bce-5d70-b3f5-36f76afe3a9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } ], "bom-ref": "urn:uuid:70d371c3-9265-517c-912b-e6e34f0ca8e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0eafa8d2-5b18-5d0b-bf82-587ca93b4292", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:302af76f-c67f-59e1-8edb-5ef83d436cab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a72bbb39-c067-5c1d-be2b-304833db2e44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0fac0199-77eb-5e99-a0aa-74032d735af1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:bf8e2620-bb21-5cff-9783-7536b37a41f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:7602f2ae-6fcb-5c9c-a60a-2c51094ab705", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:e4081ba2-1e0c-5319-ae52-2373236abe0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b275ffef-3775-5192-912e-ad7b9442263f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:1b1ab9fb-3a4f-53b0-98bb-afe8dbe5f60c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:ab191910-c635-55b5-9b30-435d4421a02c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3978f51a-5538-5132-a98a-87cf366f109d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:16f3eba6-3491-5466-9763-fbc362804425", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a344038b-01e5-5cbc-b6d0-149cfe470e5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:aa075ebf-13b5-534c-981a-f19de087874f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:5050123d-c988-59d9-9788-3e08d2864262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:1c05ed75-16d0-557e-8516-de88eb8474d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0648c7eb-7f72-545c-ac54-daa358e15ffc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b01f05a8-28ff-55dc-9cac-09bfaf0dbe60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:89362fd7-9de7-52fc-a7ea-46b164dae538", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:aed94316-8beb-5503-9d7b-fe6f136069ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b15d95d5-8885-58fb-9d6d-fd1eb9f4b78b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b19b1675-a81f-5422-8dc2-bd1ef5171418", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4d233af0-e785-53e5-9624-692c4cddb9b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:154460b4-89bf-58f2-8c28-4b9a8f7153cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9d1e8971-b290-5bdd-9dea-f34196b7be44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:4d6818a1-742a-5a88-9a69-bf8d19ab724f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:d6cbeae8-5b5f-54d0-a594-d423010d695f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:b215396e-f65c-56f6-9d34-7996623868f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:2c8036f1-7906-5ce6-a7e5-18877b21938f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:3115bdba-891a-57cd-b3dd-f9f111ee3c16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:48703576-350d-54f7-b20b-6cb1291ab2a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:17a9850f-257d-5792-b284-8742237b6d23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:0e19bf0d-8cd5-5a99-a87b-86e4f59d7eb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-4123 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.3." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:9a1f33e1-4b25-5c9e-bce4-ff2e6710646a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:7aaac229-6f68-5b96-9fe0-b514c4820fa1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:a2c88cd9-d94f-5e68-b044-0c04f8425ff4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:d456e984-d602-5a0e-8395-58235121d168", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:90775331-6de2-59c4-9eb1-c1898a6d827f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:53d84f03-c91d-58fd-a0ea-b1f9dd5d01f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:dba814a6-268b-5499-aba5-b93ab17320be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:aaed2b79-0c04-55de-8abb-5b0957cafb66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:f8389ebf-bbc4-508f-9368-3bb6ef79b863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } ], "bom-ref": "urn:uuid:af2dc9e2-44e7-5443-9a5c-fac5c8ea26c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:3e4fe7da-be51-53cf-88c8-21dfb1c25e83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:fed57e5e-df6a-5949-b546-6cf1e6060746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:8e6e687b-f317-5e59-9122-f496f5353251", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:15478c0c-96d8-574a-aaaa-53cd2870c4b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:bdcb4b05-98bf-5716-a0c5-539518a0beb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:b129bfe3-83e9-55fc-b95d-5173e895d3e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5413c7a1-6226-575a-9956-01d6d5f1f1f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:721d3a12-d4c3-5a11-a6bc-9ce109e71850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:ac7873a1-154a-5d7e-84fe-b2bbb968753a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7f6d02ad-32ec-595d-8422-672790924ea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7730b1bd-5665-5c20-af94-2f7923b714f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e62561d7-1936-5eb7-b669-340f2742037b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:ed06e837-5165-5d52-b448-2fc81988b911", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:3918d92f-16e6-5cb5-8372-06929ea7e57f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e896b249-98e9-5013-8868-b248678c379d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:d6f2b03b-7e3e-5311-bafa-3f192a8592dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:491ddd72-da0e-55b6-b1d3-3ff302d000ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:d5059fa9-173b-5c94-9973-c4ce9d83e0f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:15765182-2750-5941-ba64-adbee4d6d08b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:76b901a9-45c1-5b44-8f5f-dcd715207c4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:0c4ac1d6-de36-5da1-ab24-0b50e0a4e03a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:f2496c52-666f-5980-90a4-c48affdb3309", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4d9e69bb-6ca4-53fd-b9aa-49e9cffca5ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:b2160e92-9ae9-544c-95fe-5c5b87e70e92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:0bf8d613-be6f-5d2d-96b0-61a142ecfa37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:593070c4-d059-598c-bbc1-8f340c1a27c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e7620131-e3be-5e27-987a-4424ef317240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.4." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:1df5d04c-9c86-587d-ae29-55ac2ea33027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:8f181842-ae8f-50ac-899e-4b287cee1ad5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:467ccefb-5977-5f75-ba3a-ff76c8b60aa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2a0c87fe-e12e-51ee-a890-8ae92ae9b6bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5949ddd0-5442-524d-b04e-7038211bc059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:ff7b19bc-617e-55f3-987d-cc44fd24830b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7558643d-d456-56ce-b7c0-d46babdbf9e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:83a2302a-15ae-5890-ba44-8e5f590fae34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:eb5e2c5b-ac7a-510f-8cae-ac144fec159c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7a6cc613-0bce-5700-bdf2-ccb32173aec1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:42013a59-cc91-5ef4-9b0e-d2ff8d037c58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:45acf090-09a4-5a43-b98c-75b4bf0b5858", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:988819e9-f55d-5130-9729-8c2c7f290cc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:0ba4667e-e292-50ef-9a02-f548c81fc3e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:0262a43f-327b-5035-8ab3-2ed23153ed9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:52026ed1-54cb-5faa-bded-11eb649f91c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:fa7ab9d2-6282-5414-81ef-b5de912e864d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2de4170f-bfe4-56ef-adf0-f168a91e7bb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:9e5993b2-5a6d-560e-949b-bfe163de1864", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:62924ca6-dc0a-53fa-a092-f6765c3aaaac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e360a061-2c01-5c7a-8650-5aecd1c867ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:aed0dace-2e6c-5d0b-b5d2-c63910330da7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7cd2c256-2e59-5512-a2c9-e5cca42c2df8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } ], "bom-ref": "urn:uuid:8e4701cb-0efa-5246-82ae-36c7a539c268", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4b7a7e95-549e-5372-b709-2ef30a74e159", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:45c0b37f-97f8-55f4-a739-a89158bd7c14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:aadb93df-0781-5f98-a0b1-efdf7ca6082b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:d8566886-56dd-5141-b99f-a77adc8ba480", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:bdc480a0-7355-5c45-8a3a-668ed8a9225b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:da6ae5d2-ed8b-5796-ab32-f2d752b59796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2309edcc-4afe-5bf6-9f0d-59d99f431135", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:8a0a5849-799a-54f9-963b-684767ca9954", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:3f75ac48-ba28-5388-9bf8-d686dc60b784", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5e5502e3-3d0c-5379-a20a-bdcef50e2c6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2690668f-f7d9-58e0-85f2-da2c9049a1e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e501bf56-b8f9-56b4-bdef-80231852a90e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:184ca98d-28e9-51f6-989b-77c7f6248595", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:58c9c926-7502-571e-9266-0cffa062c2d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:3e2a708f-28e2-52c0-823b-16154233293c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a3bc3395-fdda-5679-a870-27a00df1d417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a387e423-edf5-5213-9c1d-ed30da8e5043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:cc05b0f0-bb46-514e-942d-9816ec570336", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:fe77af66-36ea-59b3-8085-03d43dcf90a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:eaa2de6f-f643-5cfb-aaac-38ee6d4306ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:35be31d9-fbaf-5caf-8569-c21a3a1fd45f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5163f08a-8f95-5ddd-9691-d3ec7673e32f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:33e00b82-9170-5181-8e31-1c9c3f92f5b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:c47e653e-2a45-5646-944a-8afcfcd86eed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:3b1b1a14-1959-5795-8816-762e247ef6e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:6a04a492-09d5-56a1-97ce-1464464f82b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:ac09f907-be61-5404-961e-302b0634c0bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:59c5b01d-8c59-502d-8ea3-e5233d96e876", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:62be47be-32a2-5d1b-bac8-895afd92f828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:16a4dbcd-d9cc-5ec6-baf8-74f81551f96b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:8c6f7061-3fab-5730-8cab-078ff3172f0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:3fa50b9e-c8aa-5043-aef9-33cda5d12f5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:9273efff-45f8-58d5-a1e9-9a2c7fc8cfd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2c24cdeb-0c1e-55ae-aae7-80a3736d0465", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5124c3fb-590d-5553-b666-1e19d975c23c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4d35ffca-1df4-5d31-81bd-64fcdbfd957e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7217439f-35a6-52e2-a54d-f1a1829ae890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5d56eebf-1f64-57d8-b2d0-3a38729e6847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:48023cc8-ff9c-5026-83e1-19e56160861b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e490e7ed-8c7e-59d7-b5fb-01108ef181ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:f0a11606-ce5c-5c51-889f-19c3a434275c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:6080b87d-bfd4-5e45-a78f-c738b3bda9cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } ], "bom-ref": "urn:uuid:c546d1d0-5931-5007-b36b-4065fb548032", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:22517462-c8d1-5d36-a563-ef0d4a00c9f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e65c2f16-5747-58db-90a3-388d7b934bb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e184846e-110a-5a2d-a4ee-e4e040b1256f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:560a4479-5c83-510f-b275-65581a631fdc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:58464e6d-aa3b-55d5-ba60-5953093e069e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:fb700364-4bd9-513d-9843-ec0aad0d941b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:eaa50446-fac4-53e3-b20f-5738a4ac7ede", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:55611fa3-753d-50a6-85e4-ea1eac0f5edd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:6bf69757-731f-525a-b3d4-365a57c3fb9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:1aab8002-de25-5d47-90c7-05d5ebb24b1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2dd7155d-cdfe-5e59-87be-b3e3e2344259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:19b7b713-7571-58be-af80-35c9adb07e6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:39b1daf4-6bd5-572f-ab50-f7fc699751a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:896b6363-39d7-5610-8735-c9ab45b8ab5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:67586d3d-dbe3-5b71-8102-4a0232fc290d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7c76afe5-954a-5834-8929-5eed68e97ef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:b8fee497-0e76-5ee6-ab7f-c40bae3e4741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:0c3880a4-4bf1-58c6-a4c2-c7ac51d2e7ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:178c3b4b-42bd-5bca-9333-e94586ca85d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e39c4184-e156-53c7-b3cf-883fec87a48f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:b17aa48d-7dbc-572a-aa35-24cc9a24e163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:846b1b96-e8ec-517b-8fbf-ac977a17f0ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:83a07383-56f3-5436-b578-9524d0cfef6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:d083fc96-ca04-5166-b3dd-0174cfe2a982", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7290e05e-27d3-52bc-b5c9-d23a96801831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:f28effff-e899-5a1b-9972-f5a0ad925349", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:82760cf6-4a76-5d9c-be03-d329c63f84da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:65d80f36-30f5-5fb9-be70-b68796e3cdad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:33e5c966-d83e-54b8-87c9-aff53b681727", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a1cc47d1-dcdb-5429-9f11-a05707c88945", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:371a8078-da3d-5c8a-bfab-3ae4faa2a8f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:99517878-b5a0-58d3-8563-686fb9ab4323", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:cdc4b97f-aecf-5bd7-ba74-1c45fdde2f68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:bdd1427a-34f8-54ee-befa-f297af3d7f82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:0e809376-225a-5b2e-a3ae-0d65a5038f04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:29fa3eb8-28fa-5c9e-aef2-2d64bb5a362d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4a3449b3-297c-5a36-af00-080c62ef7b1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:cff75c68-8817-55ef-9ee5-26f050e721f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:9ab4d985-30e8-5056-b07c-bcb815e351c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:c7930e1a-a420-58f7-b597-396d7d96112f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a7a2e50b-e858-56c5-907c-206368fef40e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:c4658eb7-7601-5d53-8774-15fa92769c88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } ], "bom-ref": "urn:uuid:351abdb8-9c33-5447-8b95-611c0cf8ea06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:21b2967c-7317-5bf8-943c-5e0189b8f29f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d4408cb0-6f49-51a0-b764-addf73abf36b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:3a5cb683-758d-5f17-bc0d-ce2aa0b3cd06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:c4d5ca30-3aeb-5e83-912c-52feacbb4b66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:c3b7eb57-83fa-5492-a119-9b538d78e371", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:dc2d1ffd-8669-5e90-aff4-554a3c0bf78d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:4e9aa825-a98c-5a05-938e-f48faabacd79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:b27fc51f-8600-5e32-a446-99b320829d18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:1d7713b4-7ec2-520b-b60c-235cccfd069d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e3532294-ef7a-5ae6-b404-17d3e5b840a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:c351d447-79fb-5852-9a6d-1cdd6a962e36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:10840313-ebd7-5372-8659-065caa68631f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:dd00ce59-723c-576f-a426-0b413d5bbf02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:26090d5f-69f9-53a4-a375-49a1ec2f22ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:8a3fd1dc-db67-54b2-9285-66057b2e0585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:b9246706-dca9-502b-bf5d-ae0255558427", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:160867fb-9119-55bb-a849-c959d950499f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:dbe29bfc-ff48-5dea-8d13-b28b9fe2a554", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:9e2d7c34-e055-56e2-94dd-0d80dae5efe8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:da6bca6b-7ae5-56a0-a0fa-632a34453ec9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:40407d2f-9463-5344-952b-467335fbc20b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e7ebf9bc-25e0-5fad-988b-c3976fc1755d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:c525d936-46cb-530a-bd99-04b74527e410", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:0f6af399-8a7e-5f2a-8f47-8bcb8e0aec4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:ba74fdae-d2c3-52a4-bed6-8c6e7ede17df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:710c8e90-d3b2-58e2-8e84-68bd2493f4ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:8d5d4aec-f6e7-528c-8704-0866704d40b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:a8f5ba00-3454-5c18-8869-71f2df4c2a1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:9765e90d-1345-53f4-9195-f44f3bc0cd2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:16e296de-9bc2-54cc-96ce-f23ec821d041", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:189a4809-9dbe-5b08-9e68-4e2ccc94b8a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:9bf99ca7-264c-5a35-97c5-986087d4c68f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:36cdab9c-2f65-5591-9f76-f86de7f54dcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-4123 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.3." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:2840674b-8250-53b9-abc8-cd6f42b23177", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:b6b36e56-e8ec-5ec4-9a87-33c3394010be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:6aadc8d8-2cee-5f3f-b821-354909b8293d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e13b8d8b-914e-5e45-a041-67b012d650b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:3821aee4-0161-5858-87d9-9dcf3cbd79f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:f29229cf-12d1-520d-91bc-1dee2617c6fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:80c56ae2-0878-54e7-a113-e1820b50367a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:56b51118-4496-512b-9aeb-5db275a3497c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:be9ee8c2-e7da-5b6d-bfec-1b352605490b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } ], "bom-ref": "urn:uuid:73149bc6-9cb8-55fb-bc52-da78676948b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:583c5713-3d88-5848-b29c-e0f4663f5062", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4d46d86f-b79a-5182-8618-b1152f2c5b18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:b7676544-83df-5f31-b237-e75ac0e9a9c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:6d7ca03b-1bee-5c8a-828f-9075fdb12e5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a8c71ec1-9d47-5ce0-acb9-9025d64e71a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4a3d016c-ede0-5e19-a71a-508c1ae770e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:65674104-1c51-5e9a-9e99-136a000dd041", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:bfa10097-b8c9-5a4a-99af-425d3d9e9147", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:f720b17c-f063-55f4-ac69-c31ef6e0bc8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:6464a3d4-af38-55ec-aeeb-cfb0fcdfe49d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a898ce04-c55c-58bd-bcd1-a30aaa488ba4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:6768c3c4-aeaa-5704-9727-62a946141e17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:16c93869-f703-5109-9b60-b88875f752a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e06f7717-3cce-5e45-9f85-561259854e45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4ddc945b-245f-5c75-bd9c-c38fdabb1300", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:1625d179-93f4-59f1-858d-4ed824357bde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:2a71b6bd-f1f9-51de-8d1b-9206a252b04e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:9be8da1c-65c7-5f96-8ce0-14e467fa6216", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:8366975c-22d8-5dcc-8f21-74205119090b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:ce9dff94-f288-544f-b233-fed63d58a21c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:1f90b8b9-bb12-5210-bbac-a0bf6f7c83bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e09726fc-2d60-5a42-b0d5-c2e105c40798", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:dd0d2e27-fa66-59b6-9a7b-a9eb1dd8b748", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:e375ac60-13f6-55d6-a0be-e7f7db4aa2ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:77af5939-fd3d-5d04-98c2-a23371e67271", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:cdcc97f9-e39b-5a88-b923-7c5a6cb81b82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:01471ff3-9db5-5ba6-bee5-57d3f883c2b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:05fb21fe-207b-55b4-92d1-1829ddc9d776", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:62baf217-08d2-565d-bdd8-ea8357824c39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:20207bb3-cb5b-5140-b364-23a27d57926c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:4dda4368-9ea7-5557-b575-ece23aa5da51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:740c64c3-2500-533d-a181-01c3e0eece2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:5decb18c-dfd0-5fd9-89a1-1bc540d6f2d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:b9c2d0f6-308d-5d40-af10-66a85bf51c1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:43df4df3-53e1-58d6-a91a-175f0b07fb1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:84cfc257-8534-575b-afc5-10bc15d97b51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:c0796691-ff0a-5dd9-99e5-884c00b39090", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:fc3375aa-4183-5453-9876-dc3eafc10d07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a94a5882-8c3a-570c-8133-9ee5cbb4aacf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:32f57589-7dac-5a21-b423-9733512f0824", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:7324f6cf-e4d7-58f0-81ee-cfc3ddaf830f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:a5fa3eb1-38ca-5986-96a4-4af227a0ec66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } ], "bom-ref": "urn:uuid:96e00ebf-6abd-5fef-a98c-d8eb22e2cbff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:f0c61b76-2cb5-555d-ad79-eeef99d60cb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:b2a16212-a7d5-564d-971b-23cb112e4912", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:9cb0fb79-73cd-5bf9-9f9d-0336ba53c013", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:923e77ce-4157-57e9-b1f8-92af3a5b489f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:33b70456-b455-582f-99cf-4fd5411d0cca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:b8cbd81d-d3c7-53c6-bba0-43a6c51cc2db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:fae48aad-ca43-5ce0-8fa1-ce63dd718851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:24c87a2f-83f8-593f-a08b-e5c24d7781ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:ce0fe536-ba12-5ce8-997a-a9d9c609c5a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:e3afc23a-169d-56c6-b847-4cd887bbe1da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:c7d645b0-cf87-5c42-a865-214a8126ec31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:5877599b-bffd-5985-8c08-f6a3bf776904", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:b64a0ed2-6362-5858-b7dd-f8dba2a45dfd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:f2930c7b-4faf-5a19-8258-ef8f5daf20a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:a371477b-6574-5bca-b65f-6e0df7c34b64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:a990453a-3e32-56c6-8402-94357dc99e81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:9daf9ca6-7346-501d-88c9-58cced556193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:05d84491-cfa7-5a8f-9083-7e573d32173f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:6cdc2936-5ff3-53ad-ae32-aa437b21e78c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:4022a725-96ba-5540-b6bd-01eb9ab62f58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:a35e01a6-480b-54e9-858d-39a64cdb7ac6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:5bf0128b-11f5-5962-9426-2b9633e0df95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:059c1b63-ff7d-568c-943d-f918e5ce0a61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:dd8aa656-9fa5-58c2-a2dc-666fe4c969f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:38276e8c-e8ae-537c-9de7-a1289bb0ba3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:4a61f8fb-2f72-59f5-87e2-3307f7220fdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:8f84015b-41d8-5952-89bf-6734f7c493cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1088 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:fd16c37f-d17a-527b-b9de-03a5c6e920dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:ab280e82-8b66-50ab-87f4-ff56b3edc608", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:8590cd24-4ec0-5745-91eb-4ccd8345d7e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:4ba9a216-3b1e-5b4f-ae9e-c9211646fcb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:d258eb50-194a-5780-860a-d75bad7dd573", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:14f79f9d-c327-54ac-ab4b-cde23c2ade35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:48c87a84-5951-52e7-8496-38b71e09a602", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:4cecb65e-3464-5093-b96a-a612bbdf1197", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:cfa7fe44-47b5-5096-8562-d72fc5d0658c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:c44b3591-af0c-5544-a17f-b102884742f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:221b75b2-05d7-5a19-b1c7-7b87f215ec1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:0d570c4c-b760-59a3-8051-3b9fc2b3949d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:f61e3ddc-1bdf-5db0-a58f-1fbf5e7c1aa3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:ac479099-cd04-5666-9986-a271423ea450", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:b5aa7c9b-7dfa-5148-b281-7bc96e0b5324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } ], "bom-ref": "urn:uuid:512d9a30-4c9e-589c-8ed9-bbb2c982d469", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:96ffd9dc-df98-5c1b-925e-43dc75f3ea1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:40c13e14-7fd5-5750-b4b4-583ca60f9b84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a72e806a-2d83-55dd-abde-4803024002ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:37dbe5ff-1088-5ce5-b012-b9da67a9016b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ed58a30f-186e-533a-a17a-2240e62df89e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6f96b201-7695-5b87-81ea-bb89feb84217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5fe6b74f-e579-5729-bc3f-3455ed67c53b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f5b2615b-151e-5cf8-ae00-bbb416839870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7a1697ba-5336-52a4-8546-f8988b341ce8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2b446870-3a6c-5487-954c-969da6d3086b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dee66b4d-79da-57be-813c-9d95a6f47003", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ef308ca7-9f71-5c84-8b2a-baae843e8e25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f46eef92-e89d-5417-834b-6df73249d916", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:3c9c25b9-d20f-5bfa-ab0a-737e5d922a0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:71cb7270-646f-5225-a016-68ceabd55531", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f673121a-6b03-5d85-ac99-c023e4698d9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0597b55f-3b6f-51f8-94fc-570d104bbe80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ada74378-8630-5819-a4b5-609c813d922b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0d2d6e95-11f7-5792-871c-7a46323a400e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:73e6fd80-a60a-5d72-bc30-db6b73ac2196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6af393ad-7566-560c-8ad5-ee048f6267ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:66d1fafe-f764-5018-ac0f-69fbf9d67efb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ef7662c0-6f63-598a-9fdf-ccbd8389b1af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:18fb59e0-af04-5641-886d-57193fafdf75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6266a8f9-58ce-53d7-9a0e-a2ccef117891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9e852b8f-a7dd-5869-a075-b902464d3ea7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:509fd98f-8a5a-53b7-8971-02d9ae11521b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4436e9c1-a730-5231-a6e0-c998ec09abdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4a36d510-4755-5e1f-bc5c-26985a805ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:95babd7b-f4d7-51b5-b7b6-ee08b2e19584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a8ed3891-ffd2-5a4b-b432-2780c0e0a511", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:67ed5da0-ec03-58ab-93c0-0cae9759b06d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:29d5f84b-aaab-5e44-84ca-f294eef6446f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:29c0a04f-b205-5dc5-b926-cc67f6e6e328", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:36e65f75-c59d-5fcc-9793-a7d33fd4da7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e06e92ff-8ec4-577d-be95-cd4fc9ce8cb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0988ca6c-7c5a-5240-a06d-c67a379721a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9e4d268e-f194-56e6-8078-81054cf50ec0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:19daada9-fe49-5b80-968c-4db03525172d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b5223ba1-818c-5237-a4ea-f060d67e1dde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:53d613f5-3101-5f6c-b434-ec98843cb86b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:058783ff-56c9-5393-8d1b-80763e5cc6b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:974edd6e-e1c2-5392-8db6-8eed648b580a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b217bf94-acf8-5081-9089-08283a62e971", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1a689b28-dd16-583a-ad3d-7d2b1a2225cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d169ba28-8d89-52a1-91b9-20d1fc84814e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:13826e1a-50b0-5ff7-a03f-731d433da6ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4238cb1d-34e3-5789-bbb0-bfc00fcc5993", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d18bace0-e9ad-5cc6-b343-30defd0850ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e157220d-9df3-526c-9de7-5c3a162168a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b6d2ac4a-ef03-508d-90af-6b1bb306a53b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:05775b5c-0a35-5d64-b647-fc9f1c58c295", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7b0194d7-8f27-5e74-860d-6097a1a7ef65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ecec3cf3-168b-5a49-adc6-4e6e4ba81240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7a0bbb40-486c-5db9-a40d-a143584ab4a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:90921108-12c4-5de7-8d48-f3f6a470fe54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c8a8a9b1-3e5c-51be-b9b9-8b9a0f313634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:419362c9-6235-51b8-903f-59e3d7907af5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:eeae65aa-6dd8-5666-b927-3e7a4b08b955", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2826dcdd-a7cb-592c-8fc3-442bddede6b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5da9c728-2d8d-5ec0-a7c4-fcb25c6e1877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9bee6fe0-d444-5861-8d3b-f46bf8728b38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:adadcfd8-0dc4-58b7-8f67-e24516dd2760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1781696f-8f75-5411-9ca0-a1340f00f46a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a618290f-66dd-55be-a024-14fb61785fa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2ef7f0a6-3d72-50bf-a73e-7738bf5f06de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:33157e29-73bb-5293-89ca-91b3db018299", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2f61b083-aeb6-584d-82b1-9a59d6df1806", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8b702f8b-ac8d-550d-8bbe-12493929e335", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6abe0dfb-3a3e-550a-b5b4-5b6c1c27480e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ecb5390c-1cc9-5ea6-9737-b2f5ea762d81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8252bb5b-e87e-51db-97b2-fc67952af116", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:30e53b4d-224f-51d9-be4f-55e987f020a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:75425011-d3e6-5249-ad7d-e060512abd48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:049e415b-a62c-51e8-b703-1e6688c773ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:abe84217-a4f3-5955-98ef-3555b9c81c05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f4c7f94f-995d-5fa7-ba33-f385bb8fe369", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e840b372-e26e-556e-9bfa-808cae80fe72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4afe254d-ca41-56fe-a7d7-216bc0237e9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e3908278-8c8e-5c6c-a59b-2cbdd3dccd85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:78abc80d-6c62-5830-8a90-6150628b3013", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ccfaf926-bb1a-539b-94c6-01ae65101ab6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9cf99936-c406-5fab-a2db-dd5af4c4c727", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d0dd6421-fa45-5d4e-b86e-24023b0dd8e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:674c1cfe-f555-53d6-8365-02090e0e8dc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d8060fed-9e8d-5ea0-a7bd-458b1f41b965", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:34c32846-2c38-5fe3-8c3a-0bbf9dbb90d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:59438914-6541-5c93-a95b-302aa734f7a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:92341d71-b98c-564e-bec1-3cdac2859370", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c50cf008-1055-5c4c-9f70-71f0ab17e8c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a74b7825-8873-5c99-b901-6c2ccabfeb70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e9aa62cf-4469-5e9d-b853-9124f1e0420a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dfd3b76a-4f2d-5d00-9820-bb26f4fe4e46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } ], "bom-ref": "urn:uuid:76203058-135d-5317-9085-62f18a462de2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:6ddf011b-658d-579b-ac2e-7fdfe4947b08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b7285016-2309-5ee1-addd-d4bbee8a15da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:35daedd0-c759-5238-af0a-69f26d14ebc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:2551a7db-633c-5936-8da7-d4eeb71c95e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ffa4d215-4319-57b7-9f0a-88ce4ca8293f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:3a106523-7c91-5dd2-8816-d7a02fc167a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:8cf0f594-3d73-5af7-a336-03e06c19bb6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e64529d0-7f51-5e45-b993-aab15a8231a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7649aec8-d4e5-5a2d-a56d-231a836f79df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f3419cb5-414f-5f05-9607-0e4ad2cb9992", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0f51ba21-d4ba-5bd7-a996-edfd12e99ed8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:8456abeb-65fc-5bdc-a323-11b095f3b90d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ed466830-f4b9-5cba-adfe-eb1552e6bbe0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c84f51e8-1c55-59d0-a2dc-3ebfb3d5f467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7f506a44-6663-57c2-9207-76d8d543abcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:a8a18550-960a-58d2-9ab8-27f6bc805522", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f8e0a3d3-d45f-5a9d-9186-84e86f4ae9b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7dcff5bf-cd84-5f6d-8904-b29de0f6b197", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:6a0f56a6-a53c-50a5-8a37-a88790da663a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:08633673-b32d-57d2-8e58-3c20ea96156d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:51b12d04-6212-578c-9552-bdb92ad2bea2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:50bea85d-10a9-58e2-8bf9-1a9cea9db64c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b677cb13-2d6a-5426-80ea-bf65185fe1c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7ad7163e-6648-5c6a-bc4c-2d5b6eeac72d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0fdf8ea9-c97e-59ae-8de9-dede34de01d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e083b2db-7636-521c-aa29-f86e2ac5fdf7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ca2a3615-f011-513f-b25b-290feb402974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:43401346-5415-5635-93e0-65b42f609786", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:fc241207-f01a-528c-8853-3f5c15b72269", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:00c2fa7e-b611-58d0-bc37-17acee0a3d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4adf0757-690d-553e-bbee-73c286eb4b47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:786e26e7-60d0-5c3d-8ada-c7595d503ead", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:fa633e25-1d76-5e82-bad6-0fe251e81f27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:1b3038e4-96d3-52c2-a70f-808fc4c290e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:59ef77f5-a2dd-51a3-aa3d-be31ff813793", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4c320045-e186-5e97-9709-d96a0211c670", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:bea7ebd0-154f-591b-896b-9f21b0a037b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b5ee49e7-6bf8-5301-a1e4-c5326e842b86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b8e7fa75-dc16-5841-8fdb-73755b326f38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d7db0d17-677e-59b1-b4c4-61154e1158bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b18fa684-1123-58de-b335-25b454bf9f46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:84821ab9-1c2e-5a0a-81ba-6665e34b494f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:5731a606-56eb-551c-9cb0-6430d6a7eb86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:dd3dfa39-24cf-5d2e-8264-df44d47d248e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:a17bec6d-fea8-526f-9c63-f50ef8e7443b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f106c5bc-aead-5122-b76b-8baeda8b818b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:51893129-5337-52f8-9e66-f5ced8979171", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:08735e91-7689-5290-99d7-6d99abda437e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:05b0ee1e-7f35-54f7-bf5c-9eebf29dccb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ce1cafc9-e41b-54fd-9a98-fac86b45e76a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } ], "bom-ref": "urn:uuid:8efae295-b9c4-593e-9de8-e00bc4710062", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:88e37f10-220d-5acf-bdb7-ffe8e2486219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4d7a3e35-cfef-5075-8ffd-c634eea740e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d74985e1-b3ae-53f6-96d8-4dab582eb8cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:5fc49267-eaad-5b8c-aed3-dafbbc763ae6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:37f204a8-e2d8-565d-8030-0683ce3d679d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:a6a94f35-242e-5cd1-a426-63debb75e46d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b9344a7d-0379-5009-a3de-e6fb45dbce0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9808722d-4305-5011-9837-67624bad3c3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:aeb23787-e151-5b52-a51d-dd6b7d300d5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:8047b488-c8ef-5cab-a371-a9f50567882a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f9781eea-20e1-587e-8c6e-8806f39565da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f1c85088-9abc-531f-9ae9-4f2746cfbcdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:742f5797-ae8a-543d-a9f1-95080b72f00f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:cc5b402c-d949-534c-830f-f1c478f18c87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:23aa8486-ccaf-584e-bf59-b71c93c0eed5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:df566e75-61c9-5988-a244-9c02aaed9e67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c0f46624-2479-51ad-a226-9bf8c45f0f37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:197a8ae6-a5c2-52d3-a3ec-c6f90cf54f77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:428ad45b-34d0-5a13-948d-749b597a6696", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:19ab0bbb-f546-5ff4-bacf-e9106cde8058", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:5596e110-9f1c-5e3b-ac4d-559497668107", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:3b434609-8011-5e79-9599-d1b6dfa7f2bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:5a67d498-da29-57bb-a1eb-5ceb0740e561", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:81cd6db6-4fe8-5962-bd35-818ce52757ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:48a391ba-a47a-5c8d-b64a-3fa0835c3384", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:2fef8589-60e9-5dc8-a7c0-346e5a23f956", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ba7449fb-e378-53e3-8ef3-3569b3d147a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f077db89-0575-5d5a-88db-939baa6b098f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:3ba10393-af30-5bd6-8057-801df7031f0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:1fb63218-49b5-5107-a1bb-df895afb7e5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:96660b92-0252-5dc7-928d-84b48db19845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f6a6d622-78e2-5b38-af49-0835f0c47d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b0527652-f37a-55b9-b55c-6660f287311d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:cd060c49-249a-5388-821e-8ac6e983e429", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e02ab7dc-2100-594c-aba9-99c277a42b8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e112546b-7e02-5c5c-a634-60b0f1cbf755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d20115d5-95e0-5875-bcad-3b5747ae3e77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4d69bd3f-a74b-5ae2-bfa0-395f1ee66af9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:3b845ebc-9715-58dc-881e-d3f4a31f96b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ef07c797-34a3-5ed4-bd0c-2362101af590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9e0c5c6f-6ee7-5b2b-ad74-9fe9b089423d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9e81db6c-eaf4-5fc2-9f71-f3c588ec5d9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ff776d89-0d51-5b95-8737-edbaddc82bc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c0f600b2-a91f-5162-9b17-3a7fdd91d33d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a523c433-c02e-55ca-a5c5-513210a2bb6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:39c55a2f-09d5-5774-8062-a9269f602f8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0f28b578-75a0-5f74-933b-c7c08547cd75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:12ff4e44-9411-529a-89ad-b11e8d8dd18b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1681ade3-2b9e-5960-b92f-2d807c4623a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:27137a1e-0fff-5a23-b642-e360c2d8e764", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4b0b0eb5-82ef-5b2a-ab4b-9d21cd501465", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:fce005fa-d9ec-59cb-b66f-7431d13552c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2de934b5-0546-50dc-b109-6c33738fbbc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5056d864-2bdb-5d28-a804-6a2a55fbad37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:60b533a6-8146-5418-a7e1-a77c052fcf08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:20043ca2-986e-5ee6-8fe5-05c4be107452", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:716eb5d8-4692-54a0-b33b-6168cfd13480", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e7e4e481-ed4a-5af7-82e1-22050c83279a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c7be8e17-7981-5cce-91c6-f5db53574fa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a35f8f9b-821c-5ef2-b688-2880e8f55c6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:be6db3bc-18c4-55ec-afde-e8e65ffa012d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1fb6f2ee-8fe1-5287-9dec-23f39b81aab8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:99c275b2-4680-5a73-aa47-95c4f1d44abe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d8e9218a-9695-5887-852e-8035be7517de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8d136b65-6b87-5d00-91af-cd21cf4e402c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:688dbe43-7923-5a4c-8401-6c7b31a155dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ae398a6e-29b7-557e-8f92-10c28c4dfbd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:23fb7a2e-8193-50ea-8af4-4a6657c057ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c8920460-4b04-523d-81be-27c5a801bde1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:92080011-317b-54db-9ecf-607bfa74fadc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e45140c0-1489-5453-8df4-1dba362fcc87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a4004dd1-8832-5b0b-9533-8e01af346ea4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:468c320f-bea0-5c04-8953-7157110e2498", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6cce9f9f-728a-56df-93b2-66dffcd29485", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0de292bd-6184-5e28-b5a9-0558da4ab799", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:abecdadc-89c4-5cbb-add0-8e96060e0384", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c32bf3e0-a95c-5961-8c34-a31f0cbb004f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d5b7ee3b-2645-5f15-a2e5-7d8b8e9de856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d260b9dc-c439-584f-b0aa-8334c59dc382", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e613d512-53db-5ccc-acb7-810ce5ab120f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:af0619a4-d4a3-5812-94cc-505b0a2c455e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5aaf9327-871b-5e3c-a7e1-34e47e6c538b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:062902ce-7c93-5c7b-8631-291574ca8c8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:11b5e2e1-864c-5970-95a5-27f176fa2c05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c76e24e2-1209-5e6d-97cf-7950568c106b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6e7362c4-4f0d-5dc5-890b-55a8ba931ca0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:53ebdee5-376f-58ff-8af6-d4ffe4c32fe5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c8dbdcdd-96e1-5636-b148-381ac1405e71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:df11b0c8-2b99-52f2-83d5-74ea8a7f8f9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:abeb5013-8746-51ee-9d86-b2fdaff6143e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6c0603b4-69ca-556a-ac26-d1507f64fc51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:667f5d8c-72f9-51cf-a57f-e5f97ffa1f3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e52feaa3-8c62-5dba-b14f-7754f1a50c4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:64911bc1-ee70-5aec-b91b-c7f5a8bf3ac5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:fc4aca1c-1add-5c5a-959f-fcfa87c67190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:537bf903-8e70-5461-b65c-6909fd1de871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b7561550-2fcb-5568-aa30-7bc4faca18cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:bcd0c328-97da-5fe7-bf2d-ca09118f0efd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:67f15b0e-99a0-5e52-9876-ed7fe8e970f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:23f9ac7f-e1a5-577d-8dd8-0105c65849e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7093f598-28ce-51c1-afd0-f994184bd4d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:abfed89f-26e8-5073-b743-565bddb12849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:12ea9778-907b-50b3-ad0b-85d5359dd829", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9ea90c59-c8ac-5ef7-86ec-e5cfef4a7ead", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0732cfce-b920-520d-bc68-3a0955d82541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:25b7ab39-9c78-5c70-919f-fe4c2f0bedb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:11cfc8d7-f95f-58a9-aeb6-996ffadd9b58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0bb96330-8b03-517b-9045-198c27588c08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8fe0a824-d60c-56a1-8da6-faaba0854900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1af65112-ac17-5f82-af74-a0f2305a7fa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:cd53be7d-f5d6-5e5d-bee1-7d36e757f117", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0e5e621b-89aa-5de0-a411-1f50e7cc7cd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8e178437-3ded-55b9-b71d-ae0d0b359f14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:82ea2812-ed1d-5dde-a780-b77c1be911b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f0957a1d-d9e1-5e63-8e7c-abd5f8ac7d7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b3685ddf-a78d-5de1-b915-5f0f437b5e96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5e36554d-ce56-55c7-9788-6b410a036a1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0a2c9464-deba-5c31-8766-c67da3535402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c4e71fab-250c-5639-8d4c-ac87f49902a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4e3b0a4b-f4d5-567b-855c-b4f3528d844d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:84c9ab80-162e-5816-b22d-7d2985a9cc7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d0625700-23ff-54f9-9e5b-701cd22362f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:03b7f44c-e7aa-521e-b6b8-ab1873acfa13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:01a3259d-332c-5beb-9a7e-080fe8a63e40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6062afbf-16a7-56d7-8bdb-2eec03efe7c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dc3e9f3c-16fb-590c-91d4-cdf8a6365014", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:fa367496-6860-53ed-b8ab-45d52bda7f06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:866e50b3-4997-552e-a710-090e4a717cce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } ], "bom-ref": "urn:uuid:784282b9-57f8-58ed-9bcf-5c4010549b94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:406594f6-38f7-56fd-b869-4e1d359dd911", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:701d51f4-d3ac-5a9b-a440-fc49671ed71b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b4f7f789-2f5d-59ec-ada1-c939340caf01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:61a5e73c-2e94-565b-92ce-da9be7d3c9b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:d6098a4a-c4e5-52b5-80ba-50bd9265b6e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:0a0ed0df-f888-51e0-9ced-422ba8c9c08c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:dcecd828-a954-5526-a4b4-0e1490ff18b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:a042dd24-d65d-569d-96cd-6040d0c0de74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ef180386-95eb-57de-8aee-a1138cafbbcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:fd9d4079-e8f1-57ad-85c4-2d4cf071366d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:22e55f34-63f4-57cc-8ec8-5392dfd4fac5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:85d147fb-d169-5fd8-b0ea-02baa5445824", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:f3620446-f262-5dda-a07d-b6d2c37305c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:842aa0ae-ca40-5846-a87d-0532bd425ffd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:02412501-d299-5730-a66b-cf6d2c8cd8e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8ad924b1-c23e-5d4e-b51c-6acdf8659da1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7bc8cbca-5492-5b31-80d7-df1b693ae2b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2c571f26-666b-5ba3-97e4-c0dc9c5a0a57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:d22a6eac-0183-5866-b282-a1b7a1dfa6f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:da0fc62b-caee-5556-966d-d69af9be7ef6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c8d25bef-a818-5382-b10f-7cee1c58e036", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1e91bc47-f11c-51a6-8a35-b06cd9258ec3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7106627d-ccb9-58d4-8853-51b6b86efd07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:6f05488f-1c29-5148-b47e-172998f9c643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1692058f-e408-52aa-8eac-06a64989dd5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8fe32fb1-96dd-527b-9a63-0773c0150e30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:60864068-f329-516b-8e31-701458d593ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:fec1803f-e3f6-500c-a114-51333a752dc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:913f03f5-122d-5c8b-a5d8-a2c8c790d06c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8c496b53-4773-5970-b190-9a257c517bb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:926a5fab-a1b7-5d11-ac88-ce0faa9e4395", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:497f47fa-5a34-5618-b367-fa0a6ee7bac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:98eb021b-4b60-5a6c-b5ee-7282d262693b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:41cd4ef5-1b52-5192-b835-02a0f9f2abbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c1123209-6d0c-56bc-a842-9b6d86174e0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:f6e1bd7e-ca27-5fcd-b0c1-ebbd70d51607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:68631b74-544e-53c7-97a3-cd7e4463cb75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:cb7073c2-0fc0-5335-854c-f0ea52a0db11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:d5592e0e-73e8-5643-a826-6e942d53862a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c81fa644-55e8-5a0f-90bb-5f5c7d2724b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:96188a3f-676a-5241-a820-506b7dda6ad0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:510f0e70-177b-560a-b4a1-eaf61c317526", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } ], "bom-ref": "urn:uuid:748f2493-00cd-548b-b83d-0f6b073f27b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b45137ba-31b0-5796-be83-61d1f73785a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:fdf65179-0302-5806-96cb-84a647b3766a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ca52336d-8d80-5072-859b-d2e501625d5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:70f1d259-adbc-5ec1-a643-46a4687792fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c08e6845-bd15-5bc5-95e1-6c97b75d2b12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:128e812b-b441-5022-9d41-087c7a5e43a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:523217ca-e0a1-5480-ba40-d705bc432c5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4f551c2f-d216-5069-9c82-e17e34e72ad3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d72efe8e-329b-516b-a84e-b7792a3ea5ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0a3a0953-cbbe-5ddb-9381-e14881bdd894", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:1abebe73-aa03-5352-88dc-68a1cdaeb9cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f2eac7b5-cb1f-58e5-8304-0cdaf024b5ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:13a1ef8f-2ebf-52b4-bb8d-999330804a8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:a4ce59b6-76ce-5072-9d41-e3b96e80d0ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c072dcf3-3789-59f0-b189-4b1e5a9f56b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0b2c9f7f-73ff-5a47-a1e4-89fb5bac050c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:525cc248-4d34-5471-a184-0b676e5ba41c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0c63d586-4fa9-5543-9bdc-1432762cea53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d9272321-aa99-54ee-8612-6a599c262397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9a64f283-1d64-5706-99b4-db4a2abbcd52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4afc31d2-66d0-5814-8384-c8f46b90f654", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:45e248fe-e803-547d-ab26-3639ea715bff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9db7e1d6-55e6-5975-85e2-2e4ef8e5f190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:905335ac-3748-5432-985f-ca462bb61a67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:fe6686ec-6cfa-5dd7-b581-ac765169dfea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b3cde628-84a9-53c3-9539-76e7ee13298e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d5323a80-11ea-5d52-9bb0-b37610692290", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:1e443454-5e64-5436-91ad-5e3ec46464a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:56417c68-18d7-56f1-8f07-b110a8b6fe1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:2f702551-4a8a-599b-89db-3fdc39ea205a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7184ebfd-4c23-5674-b373-290c133ffb7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9ccebc27-a249-5a90-ab42-cd133b5233e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:17d8eb19-1eb0-5bfb-80d2-6a08e8630886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9551aa9d-ad2f-5f7e-8810-641d3fb6a6c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:90c18f5c-e839-5b07-ab73-d9d2ca60a862", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:8c75e949-6a17-5103-a000-0a22bc6609c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:711b46d7-f73e-5e04-9003-e666ceb468bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7de1cccf-3c81-5b29-b01d-28a00ccd2ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c47444b7-4aef-5a0d-b1d7-03b4773d54a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e5d2b5d5-5716-5bd1-b3ad-cdcb05464300", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:a8d42fff-64c2-57d9-a68b-81fc4aeecc92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4bb0ae9b-90d2-5f40-a097-f7d3a0b9df9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:3fc88e75-b60c-588b-8884-3cab18a8e15f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:8eb1ff2e-97d9-5d34-8267-c01c1f0a98a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:628fb707-32e0-5466-8bc6-60eceb695b44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:cc176a4c-15ea-53d3-9768-235ddb3edfcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d690b236-b263-51c7-9ac3-d664bea1cbb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c76baa9d-6df8-5f2a-977a-23966fe20eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e8ed7513-5025-53da-a2ca-a0c3a3a12671", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:45781cc5-28dc-55f0-85ed-8d6bb6a662df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:12a07b48-2dbb-572c-b04c-2f0e34bc5322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:609d1220-a630-5719-b2b1-1bd9bbd3da42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:82a13385-f69f-5bfb-92db-eeb1aa5a7086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:19d8a507-9bd0-5d60-8a77-1fa7824b7473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b766e42e-047b-519c-8805-0bd5a9ad381c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d7431939-38be-52be-9422-76cc1a8e7f5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:1f918aca-f284-59ca-a621-4b11a9dae738", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:cffdd47d-365f-5477-8411-e7588898d0cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7814a6b1-6f8a-5244-9608-f963ab9ab09c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:67a31f69-5a6e-5508-a446-aaf0ec1d708b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:9dde02b7-9036-57ca-b546-75469f0b2a2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:1499b4e6-f4ff-51eb-bbb5-492d3e03dde4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:02084903-8fe4-5e50-aff9-c16887e9b801", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f3a6022b-ef36-5a2a-a83c-2f495c17357f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:57013872-0fea-59ec-af89-b9673b0d7f6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:b49268e7-138c-50c1-a8ae-8e821cf060cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:a22305a0-b674-5516-8a2a-04e9ee9a457a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7a026aad-223b-5fc5-9ea1-d6fcb299bd7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e076b4f4-f174-587e-8905-f23764221466", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:39538257-2d82-5b0e-a87b-89b689cdf8aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:3d2bba8c-d5b6-5861-b1a8-68313e13b227", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:6d6bd12e-7b64-511a-8d5f-89d0d65dc84e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4f2ecc65-b41b-56cf-96fe-2586175f8b13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7eccd419-f09c-5f43-81c6-c9d7573c5241", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:fda0a25f-8722-588c-9ff0-86c3eb2f8b0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:2ae0e3f6-04e4-5044-8d9d-c03eed21acf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:20aa935e-a33c-5299-849a-3a2a406799b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:2f5b3db2-b2e3-5491-a674-a728913adf07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0fa9ac9e-bc69-5ab5-a929-3fa25de0e59f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:374e8328-08a3-55c5-b2ac-d50bc1fdadd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:84796949-14fb-54f6-8d43-8712c1791cf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:0a64e873-5b13-5f39-99c6-f478fdc2c81f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:4e27f9fc-8660-5d74-8d21-b8701c4ed865", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:63c6adfe-9921-54d2-9a6e-77f710e5397c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:fb9ac586-d765-51fd-a08d-69e13ca65e0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } ], "bom-ref": "urn:uuid:88d34270-b9ee-5dd2-8818-dc576cc2aea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:473b9468-360c-546a-a2e1-35a20bed559a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:f7abf3f7-bdee-55d9-beef-7eea28e7ce83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:38a98377-7a5d-5c71-830a-75caa67aaa20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:425492c4-3ba9-5f0e-b141-29028dbc47c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:f90b77b4-3dde-5389-be6f-1954c83187d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:393e9e30-65c6-52f5-b94a-e3fbbc63ca7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:5d9b3c3c-2c7b-5c76-8d57-a69e9242e8cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:3fbba843-28b4-5955-b6cb-6e07dcec796f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:93d4e44e-79ce-5ef8-97c6-8e61e9f5ba41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0e1fa24c-7697-5655-97ee-fd870218e8b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:e9404e26-d15a-5995-80fd-e817d5beb9ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:f4cbd993-d407-51f4-b9d7-9a2ca05cc4ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:5d6dc0f4-a0a4-5cf9-b17b-865d8f5a8b1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:c79ffcdb-e871-5330-b0e7-a937234bbafa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:e3584635-8873-52e6-a097-bf9255750f05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:5a823a10-7494-533a-8793-ade20e4e7250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:8a066a53-c183-58d3-b99f-aad141bc16d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:77df1666-df20-5b57-b733-d303e339b7f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:7dfdef3b-6375-5852-8530-7b297008b5e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:6f6a9871-6d77-598c-a850-db2b04913fac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:1af55501-92a2-5407-98e7-9799a80a3e75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:1f94e7b4-a978-5123-a9b4-2858a07ad476", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:fd7dd92d-6c05-5ee9-a2b8-858248391c5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:b8731a1a-b12c-59d3-a4b1-1fc98d0e66fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0f380240-4b73-5876-ba31-b89ad5cc2c80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:3066874a-6b77-5697-8bfb-d2ea9f19c058", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:162887f4-f22c-5dc2-8c04-b446bf5f6b40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:7264a1e2-81fa-5fcd-9081-05be92f695da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:574355c1-10fd-538a-9212-8621e2c722b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:64722277-777b-5d70-b0c5-94fde72cc95d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:c2571da5-9bcc-56a4-be5e-086ed1d01590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:b9b59b4d-1785-5160-b186-ef6ee153ac96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:a064ab08-5016-592c-ba5a-b204f7c47f9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0887ddd3-87d1-551d-b593-0bfaa9dee9bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:05505b52-3242-5601-97f0-8b3d001b83d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:6d6f2d71-d0bb-55aa-9a1e-5bfbbae7d0ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:8dcb7567-d5bd-53e3-b318-8f663ea0e7dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21727 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:7dedde6c-6205-556f-af65-0d63b0a1c22d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:689635c1-1ce5-5fa6-a33b-1a9afb5dce50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:e5d98648-769c-5113-a32c-ca2ed37c7e1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:d792abda-a00c-5808-b999-c5e7d2ce9677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:b65aae43-87d9-5389-a88f-0508c217be14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ec7aeaaf-6be8-5904-9881-f70b6330a5ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:91c26454-e48e-57e9-8d11-f14f10059116", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:9d26919a-8780-529d-8bc7-7a729c5d751a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:e5c801b8-82ab-5742-9fde-c58ee89efc22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:65790813-dabd-5a99-a92d-55e5b2744801", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:126f3255-e2a0-5feb-b060-216950b47d5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:4d07c611-7f87-5d5f-91dd-d79af9688ab2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:0e79c7ae-191f-5665-b058-d333f405d006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c82f59ca-c63a-5060-a85c-6f2379a66590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:761111fc-c808-56c0-920a-1f6495f6d60d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:600a0dd5-f141-52a9-bfd0-012d43b7382a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:9caba8f0-f91c-5b8d-82bf-e57ecefd8025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7cc96064-674c-5b08-b1b9-2a5f259b531a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:284847e4-1dc0-5629-91d3-62dc2e0d0f2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:db399d52-2622-5f3f-8a5a-180c1804d007", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:a4efad49-386b-5dc2-a94d-36a007ffc081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:af386104-96a0-5364-80ba-3072b3211317", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2dcd8730-07c7-5c6d-b667-a723ac0fc790", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2a44fc1e-05f3-5aba-83c7-b8cbbc4da019", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:e54c0fbb-c747-52ba-b983-3833b8c97b4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:e1c00368-48ba-5ae4-8fb5-8b0006a061d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:d8fff4b5-5f97-57f5-95fa-354894826814", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:5ea8ddf7-0a16-55b8-9150-7e357c0e8b48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:4f7f46d6-6b1d-5277-bdfd-5185bfd4fd8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1b8c7bbc-92aa-55f0-bb66-6a5757584f46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:962c77c4-3bab-56b8-9d15-191efcd2d1bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c9087b5a-0f0e-5085-9189-ce100bee125d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:0d1ddb13-24f1-501d-bc4e-ddeedd79374c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:80c0e40e-93fe-5c9b-b53b-50bc394a42ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2318f6b7-9328-5f0f-b9c0-fc70ed0ef951", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1ecf416f-d9de-55f9-938b-1752b569928f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:e91c53aa-ebb8-5033-80d9-0ed647a2d3b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:20e76161-7756-5db0-bc05-51c970e714ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:5f286662-94eb-5320-bbe8-c26153cb7029", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:46aeb293-0e8b-5c4e-a4d9-7611a47e1d8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:215ccce7-1b4a-52ad-a9b0-a614bd0b5513", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:73c6ce1c-9398-5abe-948a-c53fd51d703e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:dc290ac0-808a-5c02-8eba-291919ab79f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ff3330e0-0c43-5103-9a86-fb8ed4fc4003", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:328f275d-5110-5aca-9009-32289f81abcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:55700a5e-d00a-5acc-bde3-db7bf4304f3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:864afe7d-f4e9-5cec-b8a2-f03661d73c8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:10e0bc05-8823-5fd5-bdc1-26c86689dd87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } ], "bom-ref": "urn:uuid:531b2dc3-4306-5971-b3fb-cb0d86df74a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:82d29609-c157-52ce-9dd6-7e257a623236", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1f5ca54d-77ce-5225-91f6-1de81f217dc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8ba27126-e924-5cb9-b5b0-d975b3a2cca7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b7cd1d4a-47e1-5529-8204-2f108f35b91d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:62110537-7aad-5aac-92b1-17cadfa3c0b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:bbb1f0b7-7b64-549e-84ff-f903d5cb48a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:11fcf1d3-86a5-5b45-a536-013c5778e0af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:43f501dd-6609-58ad-8997-b2ae1a295ab0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:abefcc9c-3b75-5574-800a-26e92c6e923a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:cece19b9-282d-5148-a034-8ca62786c3ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7843e9e6-0ea3-501e-811f-239bef4fdf09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b817f85e-fd59-5858-b2b5-dc8ab0e0610a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:49c7055f-e802-5514-a37f-33123d630ac3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2bb63205-331a-5af7-b863-f5cfc26e3ab7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ccb1da26-1d6c-5d05-9546-f2e73bf289fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b521e660-fc6f-525e-be16-91ceefd34301", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8b7e4c26-728c-5478-aff7-b38bb3236d5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c4899343-4737-5694-a06c-8e01f29da10d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:70599a79-0c74-538d-b9f7-8b53ae04c7cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7eddb4f0-9079-5aee-b284-ab6817c54f37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:3b5c7c34-25f6-5cde-8f41-af9ee63b3fc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b4ed84df-3ab6-53a3-a7a5-9ed5104af84b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:12540f99-9b61-54d1-8d2a-14a32be8e256", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:896bfafc-df0d-54a0-8611-5921f3f31108", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:bdbe1b2b-d7db-5382-822d-c74361d95c4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:3c882a01-60dd-54ec-ba60-94c2ae0c382d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:25d61135-b379-595a-b0a9-dbc2b001455e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:129909f9-3649-5b48-bfd7-e6043d0dc483", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:81f841a0-dea5-51b2-840e-6dc878c60ded", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:a719a26b-ac54-50cb-b3df-804358d00b29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2dac9d96-5205-5cf7-ba2b-c2d4dc1df16d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:dc72c45f-6fc6-5d63-9c84-ffa1bb609503", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:5b92bce9-82ea-5178-af5e-5b0a3b288866", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7a81f20e-c892-5632-82d9-86a7df3b2995", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:94a54911-25c8-5fe4-b825-cabdfb1258ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8b0a37f8-49ca-5f18-a25d-5d7d97f0550b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:145f0239-21d5-58d1-a049-823f90f4de40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:0e9e4d9c-ed38-5d94-928d-435bcb76b7ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:bbd2c625-080b-5cc4-a814-b41c85d34477", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:0a64e627-5f63-58e5-bf89-dd17e53fddbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:06851c6f-0819-5651-8105-c49e28b277dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:7a130f12-74d6-54e4-8db6-f58bebe76ab0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } ], "bom-ref": "urn:uuid:9bed4f06-86a7-5231-b677-83207b38de51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:57824982-b1ea-5670-948e-d892733380fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:26f2967d-b1ec-5ff1-93b3-30ea18df267b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:3a7fbb28-7422-5044-81d2-89acf1ac9e6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:0e302377-9d2a-5a87-8d75-41a1523b89f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b462e8d7-2a6f-529e-9d1d-5c668212af6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8670595b-be34-5138-9f07-586caf326978", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:23274356-ac67-588a-8fed-1c38c70599d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:67232e46-e7d1-5623-9f6c-0fd53e9edde2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ae520c2f-da23-54e3-833c-4e934e5bcb35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:f3e6fd34-de89-5f1d-b8db-7fc87d34e94a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:25824849-3bff-5c97-b247-7458508c1dc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:fc37efe9-0a5f-5022-8cdc-e1155232041e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:9a45c5a8-f745-50fd-9ef3-818acd9fcf56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:112349da-7dfa-5462-886c-daedb96cd8da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:c3235ad2-3bc3-5ce1-850a-10ea0958da4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:52975014-fb85-5537-b2b5-a58c2b75d856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:cc1503eb-a92e-5342-b2f5-91e5fbac486e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:3c8106f9-3f41-57ce-90db-5c3ea8aed0e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:d5a90805-47b3-5d9e-8920-db2e2a9e9500", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:76bccbc0-015e-542c-b49e-7e901a4f2191", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:17424b19-c8ef-5610-85ff-83213e6aea17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:573f2b1b-d40a-5cae-a817-d13fef8eb21a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:12427dbd-a509-5d28-971a-42a818ae8b1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:d15f7558-b8f3-5374-8fb9-7a5ebc9e6cae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:8ac5383d-863b-5821-a026-0f8fac65313a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:5ca1a8e7-65fb-53ce-be83-7402646cf027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:f760a7d8-f2fe-5cb3-b2f7-d025f5fcd3dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:3f82d7e6-83ff-524c-8557-2fe3a812930b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:b5c3e5e7-5964-56ae-9688-10f5b1e44c6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:6d725c6f-9dd1-52fe-b9e3-b5c672c0228b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1e5bfab1-5527-5a65-b68b-c231f3908669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:13e0d0c8-1f33-5f6e-9645-e070eaefb263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:5b54698a-ad08-5ef7-949a-b6bae865d3a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:1970dc88-73f7-594a-94d0-54af4ebd3b63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:4a4313a6-82d2-56e2-a094-4cfad2133d35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:eaeac342-972b-51bd-acb2-64175869118d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ff8d515a-49e5-5fa4-93b8-13891f2d6110", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:cbaba20e-7b20-58dc-bd3a-f32428b284d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:2c0df28f-03b2-573e-a4ea-bb75a1f708a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:e703b657-1c60-5a56-95d2-e84b4b6f7164", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:6cfcb891-7591-52a5-8ec1-6867bd061dc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:3bdee3cf-d38a-570e-95d2-932059ca25e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:a711c690-1bdc-5683-bd1b-a72158471beb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:5b622157-2652-54a9-a5c6-d1b7d2794244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:66a6a4be-be14-56c0-aa3a-041b54f60520", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:29b79d6a-73c4-541e-b74c-ec03ad9c2e4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:da02c0b3-0c60-5397-b338-c8ec83080bf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:bf31f5b4-a190-5270-bb82-fbf65ef11cb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ca2a8058-fa7b-5a39-99a2-9b168b4bcab6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:ca901785-0d53-5668-8de7-fb9c6b1e0a02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } ], "bom-ref": "urn:uuid:518fbec5-026b-554b-9dd9-9eba4f6767a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:ef01baef-08ca-5d48-aa64-0311a0ada078", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:cfb652ed-4144-551a-b278-f6666c851cf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:5ec7b440-91b2-5abd-8b8b-42b2d720738a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:c14d6cee-b154-53ae-ac05-9401426f5937", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:fab6f641-ad43-5c26-a720-c1f496d347e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:1844e762-75a4-5e7f-ad58-853f47713341", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:456fd014-3868-5654-a4a6-548c4af066bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:fa5459da-5516-527f-ad43-935e952bdb52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:3d115151-1257-5de4-aa10-4b7fb2e927b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:1dc315cb-5fcf-5b6d-86bf-03d32576ce51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:6e17aaf5-ab32-5ce7-8505-8a080a56d312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:fec0cf86-c881-51ec-845b-3116d664a8b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:25d6a40e-f2c6-5541-8e82-e00cf3c3211a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:d21ee7dc-38d2-52db-ba91-d058c9ea5a7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:4e253c1e-c26a-5450-a7ef-1445f300d01b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:6f26768f-7bc4-52a4-801f-8d5c1dabe74d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:ac5e4a21-b861-5166-83be-266456fd4932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:07655d6f-79c0-57e5-b535-cae32182adff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:1096b433-a1ee-591b-b21d-16045e29ef45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:dea09834-93b8-575a-bbaf-89e973f4c2f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:8cbc7d8f-e8c8-514a-9494-0d5e8db76d31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:f5181258-4de2-550e-befd-dca9e9123af5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:4718e7f3-72c3-5b05-9f32-02e5f4e72822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:971568f5-5d06-5b0b-8cc2-d8c4842b052e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:f2502d3a-ff87-50e4-b17d-6c40018f3cc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:73344653-5ad0-5cc3-8289-8824e4d26cee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:644620e4-f5ac-5acd-874b-cb0e2e14fc16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:17ae6f0d-dc2c-5935-969d-d27d72ef9e55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-2703 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:f931779c-9418-5044-9dec-198fc080d253", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:6c9af55f-d97e-5c4a-99d9-824cc79ace54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:19b78fa1-47e3-5e1b-a0cb-6e5ad330a3d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3454 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:98488f9a-790d-59c0-8758-d0f28bb9af51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3580 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:17e82d0e-adac-536a-a85e-367585294a74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:684ffd65-ed77-515e-9f66-0a867e768748", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:01ef0206-f010-5d8d-8de7-ae4b6d07fe8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:e5879a34-6c90-5f12-adb7-4118207d2eec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:437d620c-0497-5f38-9fdd-f5dda87a73b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:d1a2f666-088c-5639-b3e7-1027fcf61b4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:81970e9c-44ad-561e-8a43-d1a9e34f9701", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:25c06943-c75f-5ef7-83b0-bb23139d94fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:ae7a59a5-c832-55c9-a674-47628db12f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:0c1fd5c7-824d-59c9-ad29-85ba1c8d50d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21725 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:08ca679f-990c-51b1-8630-2137cf061d9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:257326e8-2ff2-53c1-9fa0-8bec4282ed70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:4b543c6b-f41a-5123-bba2-45981cc86ff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27879 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:32870765-39c2-5c8d-a7bb-9fff8daebc71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28375 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:bb0429f5-8292-57c0-9e49-d2e0813d0697", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:9083846d-e4a5-5c97-bd08-adbf2706c34d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:6e206151-4f39-51d6-9664-9c216993f8db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:98afb16a-e078-5412-806f-be9390633bce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } ], "bom-ref": "urn:uuid:8dc5798a-7326-547c-bbda-736cfa41a975", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:c89246a1-e75e-563b-b579-eb761220815c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:342e7532-ff5b-5cb4-8688-15b7bcf66495", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:097d30bd-17ff-51c9-bef5-952f3ff64f1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:25f0b7d1-b26a-5681-818b-3cb2d22be20f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:8880300f-d37a-51df-b0d1-e415322645fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:5605b719-fb37-52ad-853a-794d234d06f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:c14a93a4-6ae4-5d25-9bd4-45ff5ae0669a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:fc2e36d2-efd6-5ee3-9a6f-76abadf11b5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:0774af64-f2f1-5357-82c6-8baa419f3629", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:62175199-bf27-53c9-b3a7-b27fd5a8ef68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:7578e0c6-ecc8-5656-b881-f14facf6d489", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:8769d68b-ecab-56b5-88c4-e4842aa266d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:be370e99-d5e8-500c-84f1-c3bb2f9006f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:de1f40c3-134a-501c-9842-cb1a0dd1b675", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:79bd0962-e898-56fe-96f0-06cea365f8a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:91cf4bf5-2828-5655-85bf-bd037690e4be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:e1b326fc-fe54-53d2-8e02-de4f44ea0263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:aeed2cce-0664-52ae-ade4-24606af9ca7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:6d47086b-e88d-58d8-83ed-174873d0aa59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:25c97ac4-cd5c-5091-bbee-c2709ce65e23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:4b0ce08f-650f-5fb2-8a53-d0e928e3fe92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:e07b34f8-3b89-5209-a4f7-a0f972423a5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:30867826-191b-5a5e-b9a0-f942e08204bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:ee806af9-09a3-54e6-b76c-c9d469848230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:c5fa696b-e442-5bb8-a15b-d108db7bda24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:b927057b-7086-5395-ae69-028df21b459d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:86323e84-5190-576f-ace3-7643cb6112ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:cb78c209-92a6-5296-b290-0649bc14c8ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-2703 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:648c40a3-18f3-5369-82cc-99e407f935a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:048f9fd0-b11b-5810-bdef-43256bd52643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:135cdd59-09e6-55f8-a6ae-e3dcbcfa87fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3454 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:33287c73-6ff2-5ccd-8bd7-aaf22234d742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3580 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:8063069e-534b-55b3-9abe-516b80ba3e61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:c76296c7-7748-5d44-9f22-c05443e337cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:ebaf1f0e-1cb2-5e2d-ac96-40bced131794", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:9c80098b-93e5-58c5-9690-57712368127d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:0c5803d5-b016-5933-8792-21ef28180343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:595f68fb-0da0-581f-b203-9f0e5379a2ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21720 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:63fa9125-0f51-5080-90a6-719195c18740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21721 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:94b4b48a-c6b9-54fb-b24c-e86005dbf7f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21722 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:14913126-6d61-56bf-ab82-aed665ee989b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:7d7303e1-20a0-5d03-b3b2-87d509db0b60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21725 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:f638d4c5-f7ed-52a7-ab7f-f8d754114077", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:7339d9ff-60b8-5cbd-ad8f-e655a0d0cd09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27877 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:a76f9bbe-b278-573a-87e1-20faee9a23b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27879 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:3234163b-b361-5396-ad88-9b4beacd9d03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28375 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:b2185adb-5d18-5419-8db0-128c5bad46f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:26bd3653-2e76-5a1d-83a3-ad3fec6cb42b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:3e3e63ec-93d6-5b90-aa70-b98918700440", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:fc5d4098-cc87-5e9d-811b-16e09cbe23d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } ], "bom-ref": "urn:uuid:90ed447a-ef64-5cf3-895d-821431552594", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:410265de-114c-50e7-a353-5c5daf5cace5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:233c0fa2-82fd-534b-ad57-a0e9fdd88ae1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:6c1addea-6737-5ba9-8343-33384f0a4140", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:186b430a-3340-5dd2-aca6-4c8eebfd1484", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:ad958432-d425-5870-97ca-5ff413f65eab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:1d09de4e-142e-53d4-8d2b-ea8686613c54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:912a8662-dca7-5c35-bc93-2333bdbb61e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:70d3bce0-a3b7-57e9-87e5-1c1255ff31d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:b2b2cfe5-abd4-5d1d-9a08-c6cba203d019", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:07de8634-4ff2-5495-9347-319756c657ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:ea0e5b68-0237-5bf4-b7ce-809152cd1890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:3a5f58c1-c385-5ee3-8c5b-dc37b3e6e9b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:1b088cd1-bcc6-5294-842b-c549da02af43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:94f9e457-3d98-5cce-aea5-6ff52027c0d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:53eafcf6-654c-57ad-b853-ebaa433dd8e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:6b176213-5e8f-5329-9236-0a51dc87f142", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:e8a6a5e3-5858-5a70-8c1a-5141588ff3b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:86a3e0a5-5e70-5c3b-9410-cbd7ba1f03dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:14eec7b6-3708-5a55-ad3a-25c12dd61682", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:db3fb9f3-48ce-5ee1-8ab0-739024a4d834", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:d5dd2cf9-afdb-504f-a147-9381d2d656fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:f2513f60-4f27-5a65-8587-1810f425d63b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:5ae74993-757d-5054-8d10-07b2b69bfb04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:92aa8223-9b26-59bd-8985-224981d01ee0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:2bca81f3-7ac9-5859-ad5e-1183765c8377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:8c8bacb0-ecb4-5fe1-a5bf-513c9d48dab4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:96d2527a-b49e-5411-b1c8-b12f8565ca84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-2703", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:5fc85713-31df-5476-99ac-d24791ba5c47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-2703 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:c89028e7-567b-5255-9d10-25b383bccee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:fef789aa-2925-52c6-a23c-d090e381c994", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:6c3dd435-749b-5020-8005-7440e2d6d23e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3454 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3580", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:7e95365b-9c27-56db-b530-de960741518f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3580 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:a7c4c4ef-52ca-52e5-803d-d78585bdbe04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:236f495b-d2aa-5049-820a-b075b6618456", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:e2181d0d-43b7-5a34-a81e-5d4938a7d798", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:1060471f-ffe3-5122-a030-3c831f568824", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:0dc642d4-3d65-539a-b071-906ad8dbd857", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21720", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:4f770bd4-cdd5-5862-926e-70d2706b8123", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21720 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21721", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:fe5cd096-80cb-52cc-9913-c161d8fc0c06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21721 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21722", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:70834c9c-cc30-579c-964c-4d470a16ecd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21722 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:7dbbea55-ebfd-5a9a-9e26-6f4c517ad79f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21725", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:b7ed0b70-0a96-55b7-b63b-8c9cce9d4de0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21725 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:20ac499b-fa4a-5c92-afed-ebb79466d794", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:7be87a1e-a372-5142-88c0-879f83dbb3b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27877 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27879", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:4bee8958-73b7-5624-b390-d9ee50c990be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27879 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-28375", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:65e1256a-b377-599c-91a0-2bae8d7c4448", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28375 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:3f022abb-44de-5937-97d9-69b676140a0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:381562b4-f557-55c5-b899-77558a0eee08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:0e021494-083b-557c-bf86-5a82c738d9e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:a279bcce-611c-5746-b92f-ca50aa6255b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } ], "bom-ref": "urn:uuid:e6b37960-2c6f-54b7-b6fc-6a9d95fd2067", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:99338d01-a5fc-5096-a83a-81ba2a4c2756", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.6. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:20d2f272-cc3e-5d02-b85e-8edabd091e65", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:5b2ac335-223d-5fed-85db-419de50618bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:82ddbc8e-2712-5c7a-9563-093bcafa476b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:22cf67f9-eb3a-592e-af38-e883fcf189fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:5073123c-8191-52b5-842a-8b14ac85ce3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:ba6a8c36-13c9-557a-908d-bef6d0f35a26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:82fb6d89-46bc-53c5-9fb1-37f76ccc39a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } ], "bom-ref": "urn:uuid:8b33434b-096d-5c87-a94a-706a83ccb789", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:ed6577a0-abf4-50e9-84fc-c58bbf382b04", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.7. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:0567486b-5377-5549-bc05-17b453f97f9e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:9ef97d2a-4f49-509d-83d0-c72b27c876e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:1549d95b-1c4a-51ec-b23e-a2347c2673c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:e258b5a9-a2ee-5658-9f34-fff7c679eb27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:661cfdd7-05b8-5d93-858d-8dfad59d39a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:f051ea96-cdad-5408-a100-e25043cb5183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:67c78902-7454-50f0-8502-5bf6c6358a0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } ], "bom-ref": "urn:uuid:76e0424a-97e7-5573-896a-e345cac72eb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:691da060-595d-54a0-af2f-3320c643a0f6", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.8. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:27023eb3-1128-578a-a2d7-d60848460107", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:daead592-2e45-5ebc-86d9-9f95f4c4b9bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:99f241ef-8766-5718-a98c-34b81e514bfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:ff08e377-abe1-58bd-a63d-5f2838866e47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:feb25f84-ceef-5e95-a054-d941297c7872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:5a9f5e11-8aa7-5552-877f-fcaec7ec81ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:76c5a241-5634-509a-80dd-7286f3bfe7bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } ], "bom-ref": "urn:uuid:26413ed1-8bb1-5690-b687-5a8e3457073d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:fe05c4c3-a77d-5fe4-96de-ea42189813cd", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.9. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:7d4d1298-b007-5022-9c04-5a3c6e36ec51", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:c4c81f44-70a3-5599-aa39-81aa033afbe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:ed640e22-12c4-5635-bbf2-b07ecfbf1fe7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:2429c330-da99-542a-bc89-a80e41d5d8b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:c6ab52a9-ec15-5fc3-b09e-2cde0924f5b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:0213c036-69ea-52a1-8269-a97a8fa0c003", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:7d929c04-6369-582e-8340-b45ed3efcb22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } ], "bom-ref": "urn:uuid:a0f8bc02-1033-5907-b5f5-8febbf671561", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:d1586bbf-6e61-5c41-ba02-af53ae27baf8", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.10. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:db84566f-31e4-5ed1-945f-01fb079ff472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:2d0aea2e-6992-5d69-ab0a-3fbc6d7d7670", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:5b3dac1e-c187-5b5c-bd70-813e9b08371c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:5a37e7c0-4d87-585e-ae6a-2c822b3ffb4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:0caabb2e-f894-5c5f-bae9-58beb8f861d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:6475e638-23de-5162-a618-7a25f2f48e52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:2d4443a9-2f0e-5d6b-b38e-218b8c9eda0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } ], "bom-ref": "urn:uuid:6b8ca486-c9fa-5900-894b-077951c0a870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.11." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:a53437f0-7bdc-5dff-8792-349529ba0521", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.11. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:d6e1c37c-34a7-53ff-af20-d614e3220973", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:403eac19-545e-57c6-ab02-a72e104ad987", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:bf98187e-40dc-5754-a778-bb92eda3f340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:8482f4f4-fd74-514c-bb4f-ca3eef53fd5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:0b224af7-94f8-51e7-8821-b64923ea941c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:e8ac196d-18ee-568b-b0f0-9d4b5e001a12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:1d64c5ec-191e-59df-9d60-1dd9684bba62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" } ], "bom-ref": "urn:uuid:c3780444-e19b-5acc-9840-648e52cb55a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42600 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.11 of github.com/minio/minio." } }, { "id": "CVE-2018-18624", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:78be326a-a81f-54b6-8e88-d4a7530670c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2019-19499", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:87889eba-a297-5da4-a12f-814404a42af0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-11110", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:7826ee53-ad57-514d-b9a2-35e2b1ef7add", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12245", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:a9df542d-9be9-5201-b08a-8f158388d60a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12458", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:84b48f55-72dd-53c5-a2d2-e8788d6878f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-12459", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:1f970dc4-4015-56c1-89e8-f8b9d9ab0cfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-13430", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:e06352ca-fd54-58e7-b618-dcbeb64d3619", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2020-24303", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:40d78c95-5e0f-5484-a5ec-974caf6024c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31097", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:dc0bd8d8-4283-5ad6-80be-be76e8d34a5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31107", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:98cbca3d-af6b-5a1b-8c1d-4233b5b42609", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:d4237549-2a5a-5dcd-bc7a-194c511ec2c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-31130", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:e83aaac6-ebba-5aa8-9ed1-5aff85a598ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-35957", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:be12e4b3-3802-55c3-a084-470899e3186b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-36062", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:2ca8985e-8048-57d2-a413-3858776cb5da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39201", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:69cd6c78-b66c-5b61-9682-cd7d94920289", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39229", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:b2866bd7-f231-53bc-bbde-42729e550662", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39306", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:57fbf229-80ea-5a5a-890b-836ac8e84ca1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39307", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:3098c293-db28-5792-8d1f-461348dbef72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39324", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:4d91acf8-16e0-5275-a5e8-d49d92909634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2022-39328", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:74c2951a-3496-5a63-8507-dc36a3009004", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-10452", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:eecf8e51-c8f8-5f4f-84b3-2b166d194bf9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-11741", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:052b176d-d6e9-559c-b352-be5c51f77f35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1313", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:370bff4a-19ce-569a-acf1-d8699ca2b935", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-1442", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:8c7e175b-7d08-51b5-8dd4-e943f43c1186", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-6322", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:e385b4a3-52c6-5d55-b85a-94bb7c23bd45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2024-9264", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:f6e5ce64-2cc0-53b3-b9fb-92f3cb42d48c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-1088", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:93a13e8a-808a-5882-b999-633e974fad60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3260", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:af4c8be8-1314-5b2b-a8e0-500b2424ff5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3415", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:6a917ef1-d727-5c99-9c98-e8d2d1b2aefd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-3415 is fixed in version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-3454", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:8bffb2f8-504d-5b41-b363-66c311195495", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41115", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:002774b6-2912-5a51-bae5-e804594920dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-41117", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:f3ffaf94-a763-5345-a580-9511f3a0940c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-4123", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:93610ed4-43ab-5d88-805d-304fe5142931", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2025-6023", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:6be94a45-0d54-5442-9759-3066bda87e3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-10601", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:8e0f43d1-1645-5a68-b091-76f6677ec170", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21724", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:891b3e60-a60f-51bb-acdb-cf483c0bc05f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-21727", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:b66193b2-56d8-5e2d-b707-92db1a7e61e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21727 is fixed in version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-27877", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:9f62fc59-7974-5cb1-9b2a-a6f4c80c9362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33380", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:911428ea-68b2-5b14-9ed2-1035c76ba814", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-33381", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:605b307d-3f9f-5a48-aa0b-a8d75d79268f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42127", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:a1ee6750-5d67-5953-917e-153480e0393b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-42129", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:df6968ef-9a4e-5529-be0d-07ef7a6e5af3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2026-9029", "affects": [ { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" } ], "bom-ref": "urn:uuid:88180c55-1389-52bf-a7c5-0ba0cbec5f3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.7 of github.com/grafana/grafana." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:bac45a98-3aba-594c-a4b8-57972a8da02e", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.12. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:dee0beca-501a-504e-88e3-a9ff7827f724", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:f483f357-847a-5101-a0c0-5b506c55d67e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:4a576229-c857-5b5c-aa4d-ee9229d55cbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:22947124-010c-5ab7-b6cf-3c356fc9e896", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:4bcdbb58-eabf-53e0-b2e7-91e135cb8fdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:588193a6-6ba4-5566-bc86-4216d49df376", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:f5b3d2e1-a96c-5d21-a9ea-8b8c891d272e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" } ], "bom-ref": "urn:uuid:46bc313a-9718-591f-99a4-94935f25b843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42600 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.12 of github.com/minio/minio." } }, { "id": "CVE-2018-1000538", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:92cd07d3-2873-592f-b645-0f9ee3852ae1", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.13. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." } }, { "id": "CVE-2025-27414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:a00661b7-5b0b-5422-a229-3b1e5166fac0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "code_not_present" } }, { "id": "CVE-2026-33322", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:3e998a95-6a8c-513e-aec3-dca393e15f26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } }, { "id": "CVE-2026-33419", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:4b0cf1a9-cbdf-5dce-a704-eee2c4feb809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } }, { "id": "CVE-2026-34204", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:873c4763-1817-518a-a895-c34cd0ffaf25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } }, { "id": "CVE-2026-39414", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:301ee92d-974b-5fc5-a6ea-e4f5f730f6d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } }, { "id": "CVE-2026-40344", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:e15cfa7c-54b4-5f36-b920-a0f87cedcc98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } }, { "id": "CVE-2026-41145", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:acc0f4b2-4750-57c7-bb96-90f89a263342", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } }, { "id": "CVE-2026-42600", "affects": [ { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ], "bom-ref": "urn:uuid:1153822a-9a6d-58bf-97e3-24bac1c5aaee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42600 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.13 of github.com/minio/minio." } } ], "dependencies": [ { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6" }, { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" }, { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" }, { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" }, { "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" }, { "ref": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.11" }, { "ref": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.7" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.12" }, { "ref": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.13" } ] }