{"action":"Upgrade github.com/grafana/grafana to 8.3.10 or later.","affected":[{"fixed":"9.0.3","introduced":"9.0.0"},{"fixed":"8.5.9","introduced":"8.5.0"},{"fixed":"8.4.10","introduced":"8.4.0"},{"fixed":"8.3.10","introduced":"8.0.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2022-31097"],"ecosystem":"Go","epss":0.7006,"exploited":false,"fixed_versions":["9.0.3","8.5.9","8.4.10","8.3.10"],"ghsa_id":"GHSA-vw7q-p2qg-4m5f","id":"tcs_01M5KFPSC02VYZQB1MMB3AKA1P","modified_at":"2026-09-10T03:50:14.388960657Z","published_at":"2024-05-14T22:15:41Z","references":["https://osv.dev/vulnerability/GHSA-vw7q-p2qg-4m5f","https://github.com/grafana/grafana/security/advisories/GHSA-vw7q-p2qg-4m5f","https://nvd.nist.gov/vuln/detail/CVE-2022-31097","https://github.com/grafana/grafana","https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-5-9","https://grafana.com/docs/grafana/latest/release-notes/release-notes-9-0-3","https://grafana.com/docs/grafana/next/release-notes/release-notes-8-4-10","https://security.netapp.com/advisory/ntap-20220901-0010"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-vw7q-p2qg-4m5f","url":"https://osv.dev/vulnerability/GHSA-vw7q-p2qg-4m5f"}],"summary":"Grafana Stored Cross-site Scripting in Unified Alerting"}