CVE security advisories and vulnerability history for Grafana OSS by Grafana.
28
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
0
Public exploits
PoC or exploit code
6.4
Avg CVSS
2025–2026
Last updated
Overview
Grafana OSS has 28 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Grafana OSS, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of Grafana OSS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical0
High10
Medium17
Low1
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Grafana OSS's CVEs are currently listed in CISA's KEV catalog.
Public exploits
0
No Grafana OSS CVEs currently have a tracked public exploit.
Affected versions and CVEs
Browse every Grafana OSS version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
12.4.0 <= v <= 12.4.317 CVEs
13.0.0 <= v <= 13.0.117 CVEs
12.3.0 <= v <= 12.3.615 CVEs
11.6.14 <= v < 11.6.14+security-0410 CVEs
12.0.0 <= v <= 12.2.810 CVEs
12.2.8 <= v < 12.2.8+security-0410 CVEs
12.3.6 <= v < 12.3.6+security-0410 CVEs
12.4.3 <= v < 12.4.3+security-0210 CVEs
13.0.1 <= v < 13.0.1+security-0110 CVEs
11.6.0 <= v <= 11.6.146 CVEs
12.2.0 <= v <= 12.2.8
Common weakness types
The CWE weakness categories most often found in Grafana OSS CVEs. Follow any weakness for its full explanation.
Common questions about Grafana OSS vulnerabilities.
How many CVEs does Grafana Grafana OSS have?
Grafana Grafana OSS has 28 published CVE records since 2025.
How many Grafana Grafana OSS CVEs are in CISA KEV?
None of Grafana Grafana OSS's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grafana Grafana OSS vulnerabilities?
No Grafana Grafana OSS CVEs currently have a tracked public exploit in this dataset.
Which versions of Grafana Grafana OSS are affected?
99 distinct Grafana Grafana OSS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grafana Grafana OSS CVEs?
Grafana Grafana OSS's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
What is the average severity of Grafana Grafana OSS CVEs?
The average CVSS base score across Grafana Grafana OSS's scored CVEs is 6.4.
