CVE security advisories and vulnerability history for github.com/grafana/grafana by Grafana.
62
Total CVEs
Published
2
In CISA KEV
Exploited in the wild
11
Public exploits
PoC or exploit code
6.7
Avg CVSS
2018–2026
Last updated
Overview
Grafana github.com/grafana/grafana has 62 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 11 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Grafana github.com/grafana/grafana, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of Grafana github.com/grafana/grafana's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical7
High23
Medium30
Low2
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of Grafana github.com/grafana/grafana's CVEs are confirmed exploited in the wild.
Public exploits
11
11 of Grafana github.com/grafana/grafana's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Grafana github.com/grafana/grafana version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
9.0.0 <= v < 9.1.84 CVEs
< 1.9.2-0.20260513165311-fb7336fc36c12 CVEs
< 6.0.0-beta12 CVEs
< 6.0.0-beta1+incompatible2 CVEs
< 7.0.02 CVEs
7.0.0 <= v < 8.5.142 CVEs
8.0.0 <= v < 8.3.52 CVEs
8.4.0 <= v < 8.4.102 CVEs
8.5.0 <= v < 8.5.92 CVEs
9.0.0 <= v < 9.0.32 CVEs
9.0.0 <= v < 9.0.92 CVEs
Common weakness types
The CWE weakness categories most often found in Grafana github.com/grafana/grafana CVEs. Follow any weakness for its full explanation.
Common questions about Grafana github.com/grafana/grafana vulnerabilities.
How many CVEs does Grafana github.com/grafana/grafana have?
Grafana github.com/grafana/grafana has 62 published CVE records since 2018.
How many Grafana github.com/grafana/grafana CVEs are in CISA KEV?
Yes — 2 of Grafana github.com/grafana/grafana's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Grafana github.com/grafana/grafana vulnerabilities?
Yes — 11 of Grafana github.com/grafana/grafana's CVEs have a known public exploit.
Which versions of Grafana github.com/grafana/grafana are affected?
226 distinct Grafana github.com/grafana/grafana versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grafana github.com/grafana/grafana CVEs?
Grafana github.com/grafana/grafana's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-863 (Incorrect Authorization), CWE-20 (Improper Input Validation).
How many critical Grafana github.com/grafana/grafana vulnerabilities are there?
Grafana github.com/grafana/grafana has 7 critical and 23 high-severity CVEs.
What is the average severity of Grafana github.com/grafana/grafana CVEs?
The average CVSS base score across Grafana github.com/grafana/grafana's scored CVEs is 6.7.
