TI-2026-74664 CVE-2026-100353 · GHSA-vrcc-3ch7-hppw
Nil pointer panic in kin-openapi openapi3filter decoding
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
RHSA-2026:87077
Red Hat Hardened Images RPMs Security Update
Released 2026-10-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana13.1-13.1.8-0.3.hum1@aarch64, grafana13.1-13.1.8-0.3.hum1@s390x, grafana13.1-13.1.8-0.3.hum1@src +1
Fixes 13 records
TI-2026-74663 CVE-2026-100352 · GHSA-rj39-cv6w-8wv7
YAML NaN and Inf values cause panic in kin-openapi validation
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74657 CVE-2026-100354 · GHSA-g8cf-rcjf-c8cf
Uncontrolled recursion in kin-openapi crashes the process
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74649 CVE-2026-100351 · GHSA-23vg-4cjm-66q5
Authentication bypass in kin-openapi via encoded URL paths
Priority HIGH 68
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74516 CVE-2026-110816 · GHSA-6pq8-jhm2-2vcw
qs stringify throws TypeError on uncoercible array elements in comma format
Priority HIGH 67
### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toStrin…
TI-2026-74655 CVE-2026-100347 · GHSA-fh4f-47mf-f2gj
Panic in kin-openapi legacy router from unsupported HTTP method
Priority MEDIUM 63
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74803 CVE-2026-100349 · GHSA-74vm-87hj-r66f
Nil pointer panic in kin-openapi response header validation
Priority LOW 36
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-76969 CVE-2026-92539 · GHSA-9vhw-jmv9-mgm3
Cross-org user modification and deletion via Grafana Enterprise SCIM API
Priority LOW 30
A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance through the SCIM API (insecure direct object…
TI-2026-74660 CVE-2026-100348 · GHSA-mh7x-f8wq-4jhx
Nil pointer panic in kin-openapi loader on self-referential ref
Priority LOW 30
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-71901 CVE-2026-33374 · GHSA-5mj5-pfmr-wxjp
Unbounded memory allocation in Grafana Prometheus rule conversion API
Priority LOW 29
The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.
TI-2026-71933 CVE-2026-93294 · GHSA-5wf9-m99g-f6xj
Azure Monitor data source proxy lets users call arbitrary Azure APIs
Priority LOW 28
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy).
TI-2026-71895 CVE-2026-15577 · GHSA-pm7c-5ghp-r9fq
Git Sync connections can be modified with read-only access in Grafana
Priority LOW 28
A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization).
TI-2026-71935 CVE-2026-95502 · GHSA-w2wx-887f-65f8
Memory exhaustion in Grafana Git Sync via a malicious Git server
Priority LOW 24
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption).