SUSE-SU-2026:1037-1

Security update for grafana

view advisory published 2026-03-25

Security update for grafana

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-21722US	—OT elevated	0.36% (29th)	—	2026-02-12
Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of…
CVE-2026-21721US	—OT elevated	0.73% (54th)	Exploit	2026-01-27
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management righ…
CVE-2026-21720US	—	0.70% (53rd)	—	2026-01-27
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler ti…
CVE-2025-68156US	—	0.42% (35th)	—	2025-12-16
Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`…
CVE-2025-3415US	—	1.08% (65th)	—	2025-07-17
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer…

references

External citations — patches, advisories, analysis.

remediations (40)

Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of openSUSE Leap 15.6
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan