Vulnerabilities

TI-2026-37304 CVE-2026-50593 · GHSA-3mqg-485v-x9g7

Integer underflow in Graphite

LOW 31

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00112 Published 2026-06-05 Fixed in 1.3.15 CWE-191

TI-2022-04326 CVE-2022-4730 · GHSA-m973-4vpc-x43c

Graphite Web Absolute Time Range cross site scripting

HIGH 66

A vulnerability was found in Graphite Web.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00823 Published 2022-12-24 Will not fix CWE-707

TI-2022-04325 CVE-2022-4729 · GHSA-q99p-78hp-xg5c

Graphite Web Template Name cross site scripting

HIGH 66

A vulnerability was found in Graphite Web and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00789 Published 2022-12-24 Will not fix CWE-707

TI-2022-04324 CVE-2022-4728 · GHSA-3c5x-4hvx-qrrr

Graphite Web Cookie cross site scripting

HIGH 66

A vulnerability has been found in Graphite Web and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00823 Published 2022-12-24 Will not fix CWE-707

TI-2017-13792 CVE-2017-18638 · GHSA-vfj6-275q-4pvm

send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is…

MEDIUM 49

send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15301 Published 2019-10-11 Partial fix · 1.1.6 CWE-918

TI-2013-05066 CVE-2013-5943 · GHSA-jqjf-6p78-286m

Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01754 Published 2013-09-27 No fix listed CWE-79

TI-2013-05065 CVE-2013-5942 · GHSA-ch3j-w953-hfcm

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote…

LOW 34

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02106 Published 2013-09-27 Fixed in 0.9.11 CWE-94

TI-2013-04426 CVE-2013-5093 · GHSA-m923-w2gj-v43g

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through…

MEDIUM 57

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized ob…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.3881 Published 2013-09-27 Fixed in 0.9.11 CWE-94

Vulnerabilities

Filters