{"action":"Upgrade github.com/grafana/grafana to 12.2.5 or later.","affected":[{"fixed":"12.2.5","introduced":"12.2.0"},{"fixed":"12.3.3","introduced":"12.3.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2025-41117"],"ecosystem":"Go","epss":0.00273,"exploited":false,"fixed_versions":["12.2.5","12.3.3"],"ghsa_id":"GHSA-cqp7-wf4c-3xgc","id":"tcs_01M5KF7R0VR71F6EP8M2GWJ6VN","modified_at":"2026-09-10T03:50:59.433887356Z","published_at":"2026-02-12T09:30:59Z","references":["https://osv.dev/vulnerability/GHSA-cqp7-wf4c-3xgc","https://nvd.nist.gov/vuln/detail/CVE-2025-41117","https://github.com/grafana/grafana/commit/4f624a5a01404da45d60063ae1ee2f184818cd42","https://github.com/grafana/grafana/commit/8dfa6446942873d76cd94c63a2d6b71a25e880da","https://github.com/grafana/grafana/commit/ecff0d88680cea4ad32709cb3b94b790a7f58d25","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/CVE-2025-41117"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-cqp7-wf4c-3xgc","url":"https://osv.dev/vulnerability/GHSA-cqp7-wf4c-3xgc"}],"summary":"Grafana has a Cross-site Scripting issue"}