CVE security advisories and vulnerability history for github.com/grafana/grafana by Grafana.
67
Total CVEs
Published
2
In CISA KEV
Exploited in the wild
20
Public exploits
PoC or exploit code
6.6
Avg CVSS
2018–2026
Last updated
Overview
Grafana github.com/grafana/grafana has 67 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 20 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.
Severity and exploitation
How the CVSS severity of Grafana github.com/grafana/grafana's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical7
High26
Medium31
Low3
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of Grafana github.com/grafana/grafana's CVEs are confirmed exploited in the wild.
Public exploits
20
20 of Grafana github.com/grafana/grafana's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Grafana github.com/grafana/grafana version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
< 1.9.2-0.20260616075434-82ef139930594 CVEs
13.0.0 <= v < 13.0.24 CVEs
9.0.0 <= v < 9.1.84 CVEs
12.0.0 <= v < 12.2.93 CVEs
12.3.0 <= v < 12.3.73 CVEs
12.4.0 <= v < 12.4.43 CVEs
2.0.0-beta1 <= v < 11.6.153 CVEs
< 1.9.2-0.20260513165311-fb7336fc36c12 CVEs
< 6.0.0-beta12 CVEs
< 6.0.0-beta1+incompatible2 CVEs
< 7.0.02 CVEs
Common weakness types
The CWE weakness categories most often found in Grafana github.com/grafana/grafana CVEs. Follow any weakness for its full explanation.
Common questions about Grafana github.com/grafana/grafana vulnerabilities.
How many CVEs does Grafana github.com/grafana/grafana have?
Grafana github.com/grafana/grafana has 67 published CVE records since 2018.
How many Grafana github.com/grafana/grafana CVEs are in CISA KEV?
Yes — 2 of Grafana github.com/grafana/grafana's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Grafana github.com/grafana/grafana vulnerabilities?
Yes — 20 of Grafana github.com/grafana/grafana's CVEs have a known public exploit.
Which versions of Grafana github.com/grafana/grafana are affected?
241 distinct Grafana github.com/grafana/grafana versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grafana github.com/grafana/grafana CVEs?
Grafana github.com/grafana/grafana's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-863 (Incorrect Authorization).
How many critical Grafana github.com/grafana/grafana vulnerabilities are there?
Grafana github.com/grafana/grafana has 7 critical and 26 high-severity CVEs.
What is the average severity of Grafana github.com/grafana/grafana CVEs?
The average CVSS base score across Grafana github.com/grafana/grafana's scored CVEs is 6.6.
