Go/github.com/grafana/grafana CVE-2025-41117: medium 6.1, EPSS 0.27%
Grafana has a Cross-site Scripting issue in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5332
- nvd: CVE-2025-41117
- https://github.com/advisories/GHSA-cqp7-wf4c-3xgc
- https://github.com/grafana/grafana/commit/4f624a5a01404da45d60063ae1ee2f184818cd42
- https://github.com/grafana/grafana/commit/8dfa6446942873d76cd94c63a2d6b71a25e880da
- https://github.com/grafana/grafana/commit/ecff0d88680cea4ad32709cb3b94b790a7f58d25
CVE-2025-41117 · published · modified · JSON