{"action":"Upgrade github.com/grafana/grafana to 6.4.4 or later.","affected":[{"fixed":"6.4.4","introduced":"0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2019-19499"],"ecosystem":"Go","epss":0.03523,"exploited":false,"fixed_versions":["6.4.4"],"ghsa_id":"GHSA-4pwp-cx67-5cpx","id":"tcs_01M5KEX0CAJ2X68ZSFFA8MX4P5","modified_at":"2026-09-10T03:50:04.742754798Z","published_at":"2024-01-31T23:11:17Z","references":["https://osv.dev/vulnerability/GHSA-4pwp-cx67-5cpx","https://nvd.nist.gov/vuln/detail/CVE-2019-19499","https://github.com/grafana/grafana/pull/20192","https://github.com/grafana/grafana/commit/19dbd27c5caa1a160bd5854b65a4e1fe2a8a4f00","https://github.com/grafana/grafana","https://github.com/grafana/grafana/blob/master/CHANGELOG.md#644-2019-11-06","https://security.netapp.com/advisory/ntap-20200918-0003"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4pwp-cx67-5cpx","url":"https://osv.dev/vulnerability/GHSA-4pwp-cx67-5cpx"}],"summary":"Grafana Arbitrary File Read"}