| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/grafana/grafana | < 1.9.2-0.20260513165311-fb7336fc36c1all versions | 1.9.2-0.20260513165311-fb7336fc36c1 |
| grafana | ≥ 11.6.0, < 11.6.14≥ 12.2.0, < 12.2.8≥ 12.3.0, < 12.3.6≥ 12.4.0, < 12.4.3≥ 13.0.0, < 13.0.1 | 11.6.1412.2.812.3.612.4.313.0.1 |
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free