CVE-2026-33380

Go/github.com/grafana/grafana CVE-2026-33380: medium 6.3

Grafana: SQL Expressions Read File From Disk

Action: Upgrade github.com/grafana/grafana to 1.9.2-0.20260513165311-fb7336fc36c1 or later.

go get github.com/grafana/grafana@v1.9.2-0.20260513165311-fb7336fc36c1

Affected

Fixed versions

Sources

• osv: GHSA-gxcp-jjxh-rwp4
• https://nvd.nist.gov/vuln/detail/CVE-2026-33380
• https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
• https://github.com/grafana/grafana
• https://grafana.com/security/security-advisories/cve-2026-33380

CVE-2026-33380 · published 2026-05-13T21:32:06Z · modified 2026-09-10T03:51:05.729773455Z · JSON

Go/github.com/grafana/grafana CVE-2026-33380: unknown

Grafana: SQL Expressions Read File From Disk in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5409
• https://github.com/advisories/GHSA-gxcp-jjxh-rwp4
• https://nvd.nist.gov/vuln/detail/CVE-2026-33380
• https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
• https://grafana.com/security/security-advisories/cve-2026-33380

CVE-2026-33380 · published 2026-06-25T22:34:31Z · modified 2026-06-26T15:44:23.196873780Z · JSON