CVE-2022-39306

Go/github.com/grafana/grafana CVE-2022-39306: medium 6.4, EPSS 0.78%

Grafana Email addresses and usernames can not be trusted

Action: Upgrade github.com/grafana/grafana to 8.5.15 or later.

go get github.com/grafana/grafana@v8.5.15

go get github.com/grafana/grafana@v9.2.4

Affected

Fixed versions

Sources

• osv: GHSA-2x6g-h2hg-rq84
• https://github.com/grafana/grafana/security/advisories/GHSA-2x6g-h2hg-rq84
• https://nvd.nist.gov/vuln/detail/CVE-2022-39306
• https://github.com/grafana/grafana
• https://security.netapp.com/advisory/ntap-20221215-0004

CVE-2022-39306 · published 2024-05-14T22:29:35Z · modified 2026-09-10T03:50:13.076450607Z · JSON

Go/github.com/grafana/grafana CVE-2022-39306: unknown, EPSS 0.78%

Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2843
• https://github.com/grafana/grafana/security/advisories/GHSA-2x6g-h2hg-rq84
• https://nvd.nist.gov/vuln/detail/CVE-2022-39306
• https://security.netapp.com/advisory/ntap-20221215-0004

CVE-2022-39306 · published 2024-06-05T15:10:42Z · modified 2026-06-19T12:44:21.821007546Z · JSON