Red Hat Security Advisory

RHSA-2026:54184

grafana security update

Released 2026-08-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-23.el9_8.1, grafana-selinux-10.2.6-23.el9_8.1

Fixes 1 record

TI-2026-30467 CVE-2026-42127 · GHSA-3w66-95m3-8jxg

Pre-authentication denial of service in the public dashboard query endpoint

LOW 39

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00432 Published 2026-06-22 Partial fix · 1.9.2-0.20260616075434-82ef13993059 CWE-400