{"action":"Upgrade github.com/grafana/grafana-infinity-datasource to 1.4.2-0.20250731100004-9c736aa21b3a or later.","affected":[{"fixed":"1.4.2-0.20250731100004-9c736aa21b3a","introduced":"0"}],"component":"github.com/grafana/grafana-infinity-datasource","cve_ids":["CVE-2025-8341"],"ecosystem":"Go","epss":0.0034,"exploited":false,"fixed_versions":["1.4.2-0.20250731100004-9c736aa21b3a"],"ghsa_id":"GHSA-3c93-92r7-j934","id":"tcs_01M5KG9NECTZMHF6FNCXKG1HMC","modified_at":"2026-03-03T04:56:45.265597Z","published_at":"2025-08-11T17:24:51Z","references":["https://osv.dev/vulnerability/GO-2025-3843","https://github.com/advisories/GHSA-3c93-92r7-j934","https://nvd.nist.gov/vuln/detail/CVE-2025-8341","https://github.com/grafana/grafana-infinity-datasource/commit/9c736aa21b3a669d3070d3f5f80d949326fafa77","https://github.com/grafana/grafana-infinity-datasource/releases/tag/v3.4.1","https://grafana.com/security/security-advisories/cve-2025-8341"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GO-2025-3843","url":"https://osv.dev/vulnerability/GO-2025-3843"},{"source":"nvd","source_id":"CVE-2025-8341","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8341"}],"summary":"Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource"}