Go/github.com/grafana/grafana-infinity-datasource CVE-2025-8341: medium 5, EPSS 0.33%

Grafana Infinity Datasource Plugin SSRF Vulnerability

Action: Upgrade github.com/grafana/grafana-infinity-datasource to 1.4.2-0.20250731100004-9c736aa21b3a or later.

go get github.com/grafana/grafana-infinity-datasource@v1.4.2-0.20250731100004-9c736aa21b3a

Affected

Fixed versions

Sources

• osv: GHSA-3c93-92r7-j934
• https://nvd.nist.gov/vuln/detail/CVE-2025-8341
• https://github.com/grafana/grafana-infinity-datasource/commit/9c736aa21b3a669d3070d3f5f80d949326fafa77
• https://github.com/grafana/grafana-infinity-datasource
• https://github.com/grafana/grafana-infinity-datasource/releases/tag/v3.4.1
• https://grafana.com/security/security-advisories/cve-2025-8341

CVE-2025-8341 · published 2025-08-04T09:30:28Z · modified 2025-08-11T18:14:50.887830Z · JSON