{"action":"Upgrade github.com/grafana/grafana to 1.9.2-0.20260513165311-fb7336fc36c1 or later.","affected":[{"fixed":"1.9.2-0.20260513165311-fb7336fc36c1","introduced":"0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2026-33380"],"ecosystem":"Go","epss":0.00353,"exploited":false,"fixed_versions":["1.9.2-0.20260513165311-fb7336fc36c1"],"ghsa_id":"GHSA-gxcp-jjxh-rwp4","id":"tcs_01M5KFBM2GFYMHKCK0TBG2RKCE","modified_at":"2026-09-10T03:51:05.729773455Z","published_at":"2026-05-13T21:32:06Z","references":["https://osv.dev/vulnerability/GHSA-gxcp-jjxh-rwp4","https://nvd.nist.gov/vuln/detail/CVE-2026-33380","https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/cve-2026-33380"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-gxcp-jjxh-rwp4","url":"https://osv.dev/vulnerability/GHSA-gxcp-jjxh-rwp4"}],"summary":"Grafana: SQL Expressions Read File From Disk"}