{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"10.4.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2024-10452"],"ecosystem":"Go","epss":0.0049,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-66c4-2g2v-54qw","id":"tcs_01M5KEZEHX39WQRZ7KMHWZC3ZT","modified_at":"2026-09-10T03:50:19.290379294Z","published_at":"2024-10-29T18:30:36Z","references":["https://osv.dev/vulnerability/GHSA-66c4-2g2v-54qw","https://nvd.nist.gov/vuln/detail/CVE-2024-10452","https://github.com/advisories/GHSA-66c4-2g2v-54qw","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/cve-2024-10452","https://www.cve.org/CVERecord?id=CVE-2024-10452"],"severity":{"label":"low","score":2.2},"sources":[{"source":"osv","source_id":"GHSA-66c4-2g2v-54qw","url":"https://osv.dev/vulnerability/GHSA-66c4-2g2v-54qw"}],"summary":"Grafana org admin can delete pending invites in different org"}