How many CVEs have a located fix in Graylog2/graylog2-server?

16 published CVEs have a fix traced to functions in Graylog2/graylog2-server, touching 52 functions across 37 files.

Which function in Graylog2/graylog2-server has been patched by the most CVEs?

revokeToken in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java has been changed by 1 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in Graylog2/graylog2-server?

The median fix changes 74 lines. 44% of fixes change 20 lines or fewer, and 31% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

java

javascript

#350 of 500 repositories

Graylog2/graylog2-server

Name: Graylog2/graylog2-server: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 21, 2026

16

CVE fixes located

Published CVEs

52

Functions patched

Distinct function sites

37

Files patched

Distinct source files

2018–2026

Years covered

By CVE publication date

Overview

16 published CVEs have a fix traced to functions in Graylog2/graylog2-server, the earliest published in 2018. Those fixes changed 52 distinct functions across 37 files, in 376 patch hunks.

Among the 500 repositories tracked here, Graylog2/graylog2-server ranks #350 by the number of CVEs with a located fix.

Most patched functions

Functions in Graylog2/graylog2-server changed by the most CVE fixes.

Most patched files

Files in Graylog2/graylog2-server changed by the most CVE fixes.

1graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java3 CVEs · 5 functions
2graylog2-server/src/main/java/org/graylog2/lookup/adapters/dnslookup/DnsClient.java1 CVEs · 5 functions
3graylog2-server/src/main/java/org/graylog/plugins/views/search/rest/ViewsResource.java1 CVEs · 5 functions
4graylog2-server/src/main/java/org/graylog2/Configuration.java1 CVEs · 3 functions
5graylog2-server/src/main/java/org/graylog2/security/ldap/LdapConnector.java1 CVEs · 3 functions
6graylog2-server/src/main/java/org/graylog2/commands/Server.java1 CVEs · 2 functions
7graylog2-server/src/main/java/org/graylog2/events/ClusterEventPeriodical.java1 CVEs · 2 functions
8graylog2-server/src/main/java/org/graylog2/lookup/adapters/DnsLookupDataAdapter.java1 CVEs · 2 functions
9graylog2-server/src/main/java/org/graylog2/rest/resources/system/ClusterConfigResource.java1 CVEs · 2 functions
10graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java1 CVEs · 2 functions

Fix size

How much code a CVE fix in Graylog2/graylog2-server changes, with backports counted once.

74

Median lines changed

Added plus removed, per CVE

44%

Fixes of 20 lines or fewer

Share of CVE fixes

31%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in Graylog2/graylog2-server, and the functions each fix changed.

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
CVE-2026-69190toGRNType update ViewsResource
Medium · CVSS 6.3
EPSS 0.4%2026-09-21
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
CVE-2026-55867revokeToken
Medium · CVSS 5.3
EPSS 0.6%2026-08-28
Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
CVE-2026-55841parse
High · CVSS 7.5
EPSS 0.6%2026-08-28
Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields
CVE-2026-55425EntityTitleServiceImpl getTitlesForEntitiesFromSingleCollection
Medium · CVSS 5.0
EPSS 0.4%2026-08-28
Graylog2 Server Missing Permission Check on Event Definition Duplicate
CVE-2026-65011duplicate
Medium · CVSS 5.3
EPSS 0.4%2026-07-22
Graylog vulnerable to privilege escalation through API tokens
CVE-2025-53106generateNewToken
High · CVSS 8.8
EPSS 0.6%2025-07-02
Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value
CVE-2025-30373
Medium · CVSS 6.5
EPSS 0.3%2025-04-07
graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request
CVE-2024-24824UnsafeClassLoadingAttemptException ClusterEventPeriodical ClusterConfigServiceImpl
High · CVSS 8.8
EPSS 34.7%2024-02-07
Graylog session fixation vulnerability through cookie injection
CVE-2024-24823newSession
Medium · CVSS 5.7
EPSS 0.4%2024-02-07
Insecure source port usage for DNS queries in Graylog
CVE-2023-41045DnsClient DnsLookupAdapterConfiguration resolveIpAddresses
Medium · CVSS 5.3
EPSS 0.4%2023-08-31
Partial path traversal vulnerability in Support Bundle feature of Graylog
CVE-2023-41044ensureFileWithinBundleDir downloadBundle
Low · CVSS 3.8
EPSS 0.7%2023-08-31
Graylog user session is still usable after logout
CVE-2023-41041updateExistingSession SessionDeletedEvent getActiveSessionsForUser
Low · CVSS 3.1
EPSS 0.5%2023-08-30

Get an alert for each new Graylog2/graylog2-server CVE, with the patched functions and AI-written analysis.

Monitor graylog2-server CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

Alinto/sogo16 CVEs android.googlesource.com/platform-system-bt16 CVEs argoproj/argo-workflows16 CVEs codeigniter4/CodeIgniter416 CVEs debian/libmatio16 CVEs debian/libvncserver16 CVEs debian/netatalk16 CVEs debian/nss16 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in Graylog2/graylog2-server.

How many CVEs have a located fix in Graylog2/graylog2-server?: 16 published CVEs have a fix traced to functions in Graylog2/graylog2-server, touching 52 functions across 37 files.
Which function in Graylog2/graylog2-server has been patched by the most CVEs?: revokeToken in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java has been changed by 1 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in Graylog2/graylog2-server?: The median fix changes 74 lines. 44% of fixes change 20 lines or fewer, and 31% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track Graylog2/graylog2-server CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing