{"action":"Upgrade github.com/grafana/grafana to 1.9.2-0.20260513165311-fb7336fc36c1 or later.","affected":[{"fixed":"1.9.2-0.20260513165311-fb7336fc36c1","introduced":"0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2026-33381"],"ecosystem":"Go","epss":0.00331,"exploited":false,"fixed_versions":["1.9.2-0.20260513165311-fb7336fc36c1"],"ghsa_id":"GHSA-wfhv-mj62-f5xh","id":"tcs_01M5KFQNHQA6JQK3YV7FYANSSZ","modified_at":"2026-09-10T03:50:47.864721231Z","published_at":"2026-05-13T21:32:06Z","references":["https://osv.dev/vulnerability/GHSA-wfhv-mj62-f5xh","https://nvd.nist.gov/vuln/detail/CVE-2026-33381","https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/cve-2026-33381"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-wfhv-mj62-f5xh","url":"https://osv.dev/vulnerability/GHSA-wfhv-mj62-f5xh"}],"summary":"Grafana: Users can generate Service Account tokens after permissions removal"}