Go/github.com/grafana/grafana CVE-2026-33380: medium 6.3, EPSS 0.35%
Grafana: SQL Expressions Read File From Disk
Action: Upgrade github.com/grafana/grafana to 1.9.2-0.20260513165311-fb7336fc36c1 or later.
go get github.com/grafana/grafana@v1.9.2-0.20260513165311-fb7336fc36c1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2-0.20260513165311-fb7336fc36c1 | - |
Fixed versions
| 1.9.2-0.20260513165311-fb7336fc36c1 |
Sources
- osv: GHSA-gxcp-jjxh-rwp4
- https://nvd.nist.gov/vuln/detail/CVE-2026-33380
- https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
- https://github.com/grafana/grafana
- https://grafana.com/security/security-advisories/cve-2026-33380
CVE-2026-33380 · published · modified · JSON