{"action":"Upgrade github.com/grafana/grafana to 8.3.10 or later.","affected":[{"fixed":"8.3.10","introduced":"5.3.0-beta1"},{"fixed":"8.4.10","introduced":"8.4.0"},{"fixed":"8.5.9","introduced":"8.5.0"},{"fixed":"9.0.3","introduced":"9.0.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2022-31107"],"ecosystem":"Go","epss":0.02874,"exploited":false,"fixed_versions":["8.3.10","8.4.10","8.5.9","9.0.3"],"ghsa_id":"GHSA-mx47-6497-3fv2","id":"tcs_01M5KFGKME80VKPGAFYJ42ZZ5R","modified_at":"2026-09-10T03:49:18.739836953Z","published_at":"2024-05-14T22:22:35Z","references":["https://osv.dev/vulnerability/GHSA-mx47-6497-3fv2","https://github.com/grafana/grafana/security/advisories/GHSA-mx47-6497-3fv2","https://nvd.nist.gov/vuln/detail/CVE-2022-31107","https://github.com/grafana/grafana","https://grafana.com/docs/grafana/next/release-notes/release-notes-8-4-10","https://grafana.com/docs/grafana/next/release-notes/release-notes-8-5-9","https://grafana.com/docs/grafana/next/release-notes/release-notes-9-0-3","https://security.netapp.com/advisory/ntap-20220901-0010"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-mx47-6497-3fv2","url":"https://osv.dev/vulnerability/GHSA-mx47-6497-3fv2"}],"summary":"Grafana account takeover via OAuth vulnerability"}