CVE-2021-41090
2 advisories.
Go/github.com/grafana/agent CVE-2021-41090: medium 6.5
Instance config inline secret exposure in Grafana
Action: Upgrade github.com/grafana/agent to 0.21.2 or later.
go get github.com/grafana/agent@v0.21.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.14.0 | 0.21.2 | - |
Fixed versions
| 0.21.2 |
Sources
- osv: GHSA-9c4x-5hgq-q3wh
- https://github.com/grafana/agent/security/advisories/GHSA-9c4x-5hgq-q3wh
- https://nvd.nist.gov/vuln/detail/CVE-2021-41090
- https://github.com/grafana/agent/pull/1152
- https://github.com/grafana/agent/commit/a5479755e946e5c7cddb793ee9adda8f5692ba11
- https://github.com/grafana/agent/commit/af7fb01e31fe2d389e5f1c36b399ddc46b412b21
- https://github.com/grafana/agent
- https://github.com/grafana/agent/releases/tag/v0.20.1
- https://github.com/grafana/agent/releases/tag/v0.21.2
- https://security.netapp.com/advisory/ntap-20211229-0004
CVE-2021-41090 · published · modified · JSON
Go/github.com/grafana/agent CVE-2021-41090: unknown
Instance config inline secret exposure in Grafana in github.com/grafana/agent
Action: Upgrade github.com/grafana/agent to 0.21.2 or later.
go get github.com/grafana/agent@v0.21.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.14.0 | 0.21.2 | - |
Fixed versions
| 0.21.2 |
Sources
- osv: GO-2022-0305
- https://github.com/grafana/agent/security/advisories/GHSA-9c4x-5hgq-q3wh
- https://nvd.nist.gov/vuln/detail/CVE-2021-41090
- https://github.com/grafana/agent/commit/a5479755e946e5c7cddb793ee9adda8f5692ba11
- https://github.com/grafana/agent/commit/af7fb01e31fe2d389e5f1c36b399ddc46b412b21
- https://github.com/grafana/agent/pull/1152
- https://github.com/grafana/agent/releases/tag/v0.20.1
- https://github.com/grafana/agent/releases/tag/v0.21.2
- https://security.netapp.com/advisory/ntap-20211229-0004
CVE-2021-41090 · published · modified · JSON