{"action":"Upgrade github.com/grafana/grafana to 7.5.11 or later.","affected":[{"fixed":"7.5.11","introduced":"0"},{"fixed":"8.1.6","introduced":"8.0.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2021-39226"],"ecosystem":"Go","epss":0.99933,"exploited":true,"fixed_versions":["7.5.11","8.1.6"],"ghsa_id":"GHSA-69j6-29vr-p3j9","id":"tcs_01M5KEZTFC2YWGKW6WHPVMH2PN","modified_at":"2026-07-08T06:29:56.330479904Z","published_at":"2021-10-05T20:24:02Z","references":["https://osv.dev/vulnerability/GHSA-69j6-29vr-p3j9","https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9","https://nvd.nist.gov/vuln/detail/CVE-2021-39226","https://github.com/grafana/grafana/commit/2d456a6375855364d098ede379438bf7f0667269","https://github.com/grafana/grafana","https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-5-11","https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-1-6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCKBFUSY6V4VU5AQUYWKISREZX5NLQJT","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6ANHRDBXQT6TURLP2THM26ZPDINFBEG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCKBFUSY6V4VU5AQUYWKISREZX5NLQJT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E6ANHRDBXQT6TURLP2THM26ZPDINFBEG","https://security.netapp.com/advisory/ntap-20211029-0008","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39226","http://www.openwall.com/lists/oss-security/2021/10/05/4"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-69j6-29vr-p3j9","url":"https://osv.dev/vulnerability/GHSA-69j6-29vr-p3j9"},{"source":"kev","source_id":"CVE-2021-39226","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Authentication bypass for viewing and deletions of snapshots"}