| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/grafana/grafana | ≥ 1.9.2-0.20221116104934-4ee83a5f2bf4, < 1.9.2-0.20260325055210-3522153e07b4≥ 12.0.0≥ 12.2.0≥ 12.3.0≥ 12.4.0≥ 9.3.0all versions | 1.9.2-0.20260325055210-3522153e07b4 |
| grafana | ≥ 11.6.14, < 12.0.0≥ 12.1.10, < 12.2.0≥ 12.2.8, < 12.3.0≥ 12.3.6, < 12.4.0< 9.3.0 | 12.0.012.2.012.3.012.4.09.3.0 |
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.
No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free