Description

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.

Remediation

References

CVE-2026-28375

Related Vulnerabilities

WordPress Plugin Floating Social Bar Cross-Site Scripting (1.1.6)

WordPress Plugin WordPress Backup and Migrate-Backup Guard Cross-Site Scripting (1.1.46)

MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-14893)

Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-400 CVE-2026-28375