{"action":"Upgrade github.com/grafana/grafana-infinity-datasource to 1.4.2-0.20250731100004-9c736aa21b3a or later.","affected":[{"fixed":"1.4.2-0.20250731100004-9c736aa21b3a","introduced":"0"}],"component":"github.com/grafana/grafana-infinity-datasource","cve_ids":["CVE-2025-8341"],"ecosystem":"Go","epss":0.00332,"exploited":false,"fixed_versions":["1.4.2-0.20250731100004-9c736aa21b3a"],"ghsa_id":"GHSA-3c93-92r7-j934","id":"tcs_01M5KETJ33JC9SMCS4MPQ09HYP","modified_at":"2025-08-11T18:14:50.887830Z","published_at":"2025-08-04T09:30:28Z","references":["https://osv.dev/vulnerability/GHSA-3c93-92r7-j934","https://nvd.nist.gov/vuln/detail/CVE-2025-8341","https://github.com/grafana/grafana-infinity-datasource/commit/9c736aa21b3a669d3070d3f5f80d949326fafa77","https://github.com/grafana/grafana-infinity-datasource","https://github.com/grafana/grafana-infinity-datasource/releases/tag/v3.4.1","https://grafana.com/security/security-advisories/cve-2025-8341"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-3c93-92r7-j934","url":"https://osv.dev/vulnerability/GHSA-3c93-92r7-j934"}],"summary":"Grafana Infinity Datasource Plugin SSRF Vulnerability"}