Go/github.com/grafana/grafana CVE-2025-41117: medium 6.8, EPSS 0.27%
Grafana has a Cross-site Scripting issue
Action: Upgrade github.com/grafana/grafana to 12.2.5 or later.
go get github.com/grafana/grafana@v12.2.5go get github.com/grafana/grafana@v12.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.2.0 | 12.2.5 | - |
| 12.3.0 | 12.3.3 | - |
Fixed versions
| 12.2.5 | 12.3.3 |
Sources
- osv: GHSA-cqp7-wf4c-3xgc
- https://nvd.nist.gov/vuln/detail/CVE-2025-41117
- https://github.com/grafana/grafana/commit/4f624a5a01404da45d60063ae1ee2f184818cd42
- https://github.com/grafana/grafana/commit/8dfa6446942873d76cd94c63a2d6b71a25e880da
- https://github.com/grafana/grafana/commit/ecff0d88680cea4ad32709cb3b94b790a7f58d25
- https://github.com/grafana/grafana
- https://grafana.com/security/security-advisories/CVE-2025-41117
CVE-2025-41117 · published · modified · JSON