{ "@context": "https://openvex.dev/ns/v0.2.0", "author": "https://tuxcare.com", "role": "Document Creator", "timestamp": "2026-09-28T10:06:19.501447+00:00", "version": 1, "statements": [ { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-2703" }, "action_statement": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3580" }, "action_statement": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21720" }, "action_statement": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21721" }, "action_statement": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21722" }, "action_statement": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-21725" }, "action_statement": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-27879" }, "action_statement": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-28375" }, "action_statement": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.6. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33322" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33419" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.6" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.6 of github.com/minio/minio." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-36156 is fixed in version 2.8.3-tuxcare.4 of github.com/grafana/loki.", "vulnerability": { "name": "CVE-2021-36156" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.4 of github.com/grafana/loki.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.4 of github.com/grafana/loki." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.3.", "vulnerability": { "name": "CVE-2025-4123" }, "action_statement": "Vulnerability CVE-2025-4123 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 3.3.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.3.0-tuxcare.4.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 3.3.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.3.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 3.1.0-tuxcare.4 of github.com/grafana/loki/v3, and is fixed in 3.1.0-tuxcare.5.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 3.1.0-tuxcare.4 of github.com/grafana/loki/v3, and is fixed in 3.1.0-tuxcare.5." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.4. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33322" }, "action_statement": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33419" }, "action_statement": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.4" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.4 of github.com/minio/minio." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.7. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33322" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33419" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.7" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.7 of github.com/minio/minio." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 is fixed in version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21727" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 3.3.0-tuxcare.2 of github.com/grafana/loki/v3, and is fixed in 3.3.0-tuxcare.4.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 3.3.0-tuxcare.2 of github.com/grafana/loki/v3, and is fixed in 3.3.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-2703" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3580" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21720" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21721" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21722" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21725" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21727" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27879" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 is fixed in version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-28375" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.9" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.9 of github.com/grafana/grafana." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.2. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33322" }, "action_statement": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33419" }, "action_statement": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3.", "vulnerability": { "name": "CVE-2026-34204" }, "action_statement": "Vulnerability CVE-2026-34204 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3.", "vulnerability": { "name": "CVE-2026-39414" }, "action_statement": "Vulnerability CVE-2026-39414 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4.", "vulnerability": { "name": "CVE-2026-40344" }, "action_statement": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4.", "vulnerability": { "name": "CVE-2026-41145" }, "action_statement": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.2" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.2 of github.com/minio/minio." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-2703" }, "action_statement": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3580" }, "action_statement": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21720" }, "action_statement": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21721" }, "action_statement": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21722" }, "action_statement": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-21725" }, "action_statement": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21727" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-27879" }, "action_statement": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-28375" }, "action_statement": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.3.", "vulnerability": { "name": "CVE-2025-4123" }, "action_statement": "Vulnerability CVE-2025-4123 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-2703" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3580" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21720" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21721" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21722" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21725" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21727" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27879" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 is fixed in version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-28375" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.8" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.8 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 3.1.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.1.0-tuxcare.5.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 3.1.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.1.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.9. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33322" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33419" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.9" } } ], "timestamp": "2026-09-25T17:47:00.117503+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.9 of github.com/minio/minio." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-2703" }, "action_statement": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3580" }, "action_statement": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21720" }, "action_statement": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21721" }, "action_statement": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21722" }, "action_statement": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-21725" }, "action_statement": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-27879" }, "action_statement": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-28375" }, "action_statement": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.1. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33322" }, "action_statement": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33419" }, "action_statement": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3.", "vulnerability": { "name": "CVE-2026-34204" }, "action_statement": "Vulnerability CVE-2026-34204 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3.", "vulnerability": { "name": "CVE-2026-39414" }, "action_statement": "Vulnerability CVE-2026-39414 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4.", "vulnerability": { "name": "CVE-2026-40344" }, "action_statement": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4.", "vulnerability": { "name": "CVE-2026-41145" }, "action_statement": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.1" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.1 of github.com/minio/minio." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-2703" }, "action_statement": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3580" }, "action_statement": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.3.", "vulnerability": { "name": "CVE-2025-4123" }, "action_statement": "Vulnerability CVE-2025-4123 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21720" }, "action_statement": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21721" }, "action_statement": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21722" }, "action_statement": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-21725" }, "action_statement": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-27879" }, "action_statement": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-28375" }, "action_statement": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-2703" }, "action_statement": "Vulnerability CVE-2025-2703 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2025-3580" }, "action_statement": "Vulnerability CVE-2025-3580 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21720" }, "action_statement": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21721" }, "action_statement": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21722" }, "action_statement": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-21725" }, "action_statement": "Vulnerability CVE-2026-21725 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-27879" }, "action_statement": "Vulnerability CVE-2026-27879 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7.", "vulnerability": { "name": "CVE-2026-28375" }, "action_statement": "Vulnerability CVE-2026-28375 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-36156 is fixed in version 2.8.3-tuxcare.6 of github.com/grafana/loki.", "vulnerability": { "name": "CVE-2021-36156" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.6 of github.com/grafana/loki.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.6 of github.com/grafana/loki." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.3. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33322" }, "action_statement": "Vulnerability CVE-2026-33322 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5.", "vulnerability": { "name": "CVE-2026-33419" }, "action_statement": "Vulnerability CVE-2026-33419 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4.", "vulnerability": { "name": "CVE-2026-40344" }, "action_statement": "Vulnerability CVE-2026-40344 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4.", "vulnerability": { "name": "CVE-2026-41145" }, "action_statement": "Vulnerability CVE-2026-41145 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio, and is fixed in RELEASE.2025-10-15T17-29-55Z-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.3" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.3 of github.com/minio/minio." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.3.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 is fixed in version 3.3.0-tuxcare.4 of github.com/grafana/loki/v3.", "vulnerability": { "name": "CVE-2026-21726" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.3.", "vulnerability": { "name": "CVE-2025-4123" }, "action_statement": "Vulnerability CVE-2025-4123 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 3.2.0-tuxcare.2 of github.com/grafana/loki/v3, and is fixed in 3.2.0-tuxcare.4.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 3.2.0-tuxcare.2 of github.com/grafana/loki/v3, and is fixed in 3.2.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana, and is fixed in 11.3.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.5 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-1025" }, "action_statement": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24348" }, "action_statement": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24730" }, "action_statement": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24731" }, "action_statement": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24904" }, "action_statement": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24905" }, "action_statement": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-29165" }, "action_statement": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31016" }, "action_statement": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31034" }, "action_statement": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31035" }, "action_statement": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31036" }, "action_statement": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31102" }, "action_statement": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31105" }, "action_statement": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-41354" }, "action_statement": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22482" }, "action_statement": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22736" }, "action_statement": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-23947" }, "action_statement": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40025" }, "action_statement": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40026" }, "action_statement": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40029" }, "action_statement": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40584" }, "action_statement": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-50726" }, "action_statement": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-28175" }, "action_statement": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31989" }, "action_statement": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31990" }, "action_statement": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-32476" }, "action_statement": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-36106" }, "action_statement": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-37152" }, "action_statement": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-40634" }, "action_statement": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-41666" }, "action_statement": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-23216" }, "action_statement": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-47933" }, "action_statement": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55190" }, "action_statement": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55191" }, "action_statement": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59531" }, "action_statement": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59537" }, "action_statement": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59538" }, "action_statement": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-42880" }, "action_statement": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45737" }, "action_statement": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45738" }, "action_statement": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 3.2.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.2.0-tuxcare.4.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 3.2.0-tuxcare.3 of github.com/grafana/loki/v3, and is fixed in 3.2.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-2703 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-2703" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3454 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3580 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3580" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21720" }, "action_statement": "Vulnerability CVE-2026-21720 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21721" }, "action_statement": "Vulnerability CVE-2026-21721 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-21722" }, "action_statement": "Vulnerability CVE-2026-21722 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21725 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21725" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21727" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana, and is fixed in 11.5.0-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27879 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27879" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-28375 is fixed in version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-28375" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.5.0-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.5.0-tuxcare.7 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 is fixed in version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21727" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.3.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.3.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.1.0-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 is fixed in version 3.1.0-tuxcare.5 of github.com/grafana/loki/v3.", "vulnerability": { "name": "CVE-2026-21726" } }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.8. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33322" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33419" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.8" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.8 of github.com/minio/minio." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 is fixed in version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T16:10:52.079478+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T15:33:16.698896+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.3.", "vulnerability": { "name": "CVE-2025-4123" }, "action_statement": "Vulnerability CVE-2025-4123 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana, and is fixed in 10.4.1-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@10.4.1-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 10.4.1-tuxcare.2 of github.com/grafana/grafana." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.5. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33322" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33419" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.5" } } ], "timestamp": "2026-09-25T08:39:07.251865+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.5 of github.com/minio/minio." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.4.", "vulnerability": { "name": "CVE-2025-1088" }, "action_statement": "Vulnerability CVE-2025-1088 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana, and is fixed in 11.4.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.3 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-1025" }, "action_statement": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24348" }, "action_statement": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24730" }, "action_statement": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24731" }, "action_statement": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24904" }, "action_statement": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24905" }, "action_statement": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-29165" }, "action_statement": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31016" }, "action_statement": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31034" }, "action_statement": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31035" }, "action_statement": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31036" }, "action_statement": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31102" }, "action_statement": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31105" }, "action_statement": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-41354" }, "action_statement": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22482" }, "action_statement": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22736" }, "action_statement": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-23947" }, "action_statement": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40025" }, "action_statement": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40026" }, "action_statement": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40029" }, "action_statement": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40584" }, "action_statement": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-50726" }, "action_statement": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-28175" }, "action_statement": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31989" }, "action_statement": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31990" }, "action_statement": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-32476" }, "action_statement": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-36106" }, "action_statement": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-37152" }, "action_statement": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-40634" }, "action_statement": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-41666" }, "action_statement": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-23216" }, "action_statement": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-47933" }, "action_statement": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55190" }, "action_statement": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55191" }, "action_statement": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59531" }, "action_statement": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59537" }, "action_statement": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59538" }, "action_statement": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-42880" }, "action_statement": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45737" }, "action_statement": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45738" }, "action_statement": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" }, "action_statement": "Vulnerability CVE-2025-6023 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6.", "vulnerability": { "name": "CVE-2026-21727" }, "action_statement": "Vulnerability CVE-2026-21727 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana, and is fixed in 11.2.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.2.0-tuxcare.4 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2018-18624" }, "action_statement": "Vulnerability CVE-2018-18624 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2019-19499" }, "action_statement": "Vulnerability CVE-2019-19499 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-11110" }, "action_statement": "Vulnerability CVE-2020-11110 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12245" }, "action_statement": "Vulnerability CVE-2020-12245 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12458" }, "action_statement": "Vulnerability CVE-2020-12458 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-12459" }, "action_statement": "Vulnerability CVE-2020-12459 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-13430" }, "action_statement": "Vulnerability CVE-2020-13430 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2020-24303" }, "action_statement": "Vulnerability CVE-2020-24303 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31097" }, "action_statement": "Vulnerability CVE-2022-31097 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31107" }, "action_statement": "Vulnerability CVE-2022-31107 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31123" }, "action_statement": "Vulnerability CVE-2022-31123 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-31130" }, "action_statement": "Vulnerability CVE-2022-31130 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-35957" }, "action_statement": "Vulnerability CVE-2022-35957 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-36062" }, "action_statement": "Vulnerability CVE-2022-36062 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39201" }, "action_statement": "Vulnerability CVE-2022-39201 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39229" }, "action_statement": "Vulnerability CVE-2022-39229 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39306" }, "action_statement": "Vulnerability CVE-2022-39306 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39307" }, "action_statement": "Vulnerability CVE-2022-39307 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39324" }, "action_statement": "Vulnerability CVE-2022-39324 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2022-39328" }, "action_statement": "Vulnerability CVE-2022-39328 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-10452" }, "action_statement": "Vulnerability CVE-2024-10452 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-11741" }, "action_statement": "Vulnerability CVE-2024-11741 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1313" }, "action_statement": "Vulnerability CVE-2024-1313 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-1442" }, "action_statement": "Vulnerability CVE-2024-1442 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-6322" }, "action_statement": "Vulnerability CVE-2024-6322 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2024-9264" }, "action_statement": "Vulnerability CVE-2024-9264 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-1088 is fixed in version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-1088" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3260" }, "action_statement": "Vulnerability CVE-2025-3260 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3415" }, "action_statement": "Vulnerability CVE-2025-3415 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-3454" }, "action_statement": "Vulnerability CVE-2025-3454 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T17:05:57.467202+00:00", "status_notes": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41115" }, "action_statement": "Vulnerability CVE-2025-41115 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-41117" }, "action_statement": "Vulnerability CVE-2025-41117 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-4123 is fixed in version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-4123" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-6023 is fixed in version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2025-6023" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-10601" }, "action_statement": "Vulnerability CVE-2026-10601 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-21724" }, "action_statement": "Vulnerability CVE-2026-21724 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-27877" }, "action_statement": "Vulnerability CVE-2026-27877 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33380" }, "action_statement": "Vulnerability CVE-2026-33380 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-33381" }, "action_statement": "Vulnerability CVE-2026-33381 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42127" }, "action_statement": "Vulnerability CVE-2026-42127 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-42129" }, "action_statement": "Vulnerability CVE-2026-42129 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6", "identifiers": { "purl": "pkg:golang/github.com/grafana/grafana@11.4.0-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana.", "vulnerability": { "name": "CVE-2026-9029" }, "action_statement": "Vulnerability CVE-2026-9029 affects version 11.4.0-tuxcare.6 of github.com/grafana/grafana." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-36156 is fixed in version 2.8.3-tuxcare.5 of github.com/grafana/loki.", "vulnerability": { "name": "CVE-2021-36156" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki@2.8.3-tuxcare.5" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.5 of github.com/grafana/loki.", "vulnerability": { "name": "CVE-2026-21726" }, "action_statement": "Vulnerability CVE-2026-21726 affects version 2.8.3-tuxcare.5 of github.com/grafana/loki." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-1025" }, "action_statement": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24348" }, "action_statement": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24730" }, "action_statement": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24731" }, "action_statement": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24904" }, "action_statement": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24905" }, "action_statement": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-29165" }, "action_statement": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31016" }, "action_statement": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31034" }, "action_statement": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31035" }, "action_statement": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31036" }, "action_statement": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31102" }, "action_statement": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31105" }, "action_statement": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-41354" }, "action_statement": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22482" }, "action_statement": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22736" }, "action_statement": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-23947" }, "action_statement": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40025" }, "action_statement": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40026" }, "action_statement": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40029" }, "action_statement": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40584" }, "action_statement": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-50726" }, "action_statement": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-28175" }, "action_statement": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31989" }, "action_statement": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31990" }, "action_statement": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-32476" }, "action_statement": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-36106" }, "action_statement": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-37152" }, "action_statement": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-40634" }, "action_statement": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-41666" }, "action_statement": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-23216" }, "action_statement": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-47933" }, "action_statement": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55190" }, "action_statement": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55191" }, "action_statement": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59531" }, "action_statement": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59537" }, "action_statement": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59538" }, "action_statement": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-42880" }, "action_statement": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45737" }, "action_statement": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45738" }, "action_statement": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-1025" }, "action_statement": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24348" }, "action_statement": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24730" }, "action_statement": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24731" }, "action_statement": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24904" }, "action_statement": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-24905" }, "action_statement": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-29165" }, "action_statement": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31016" }, "action_statement": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31034" }, "action_statement": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31035" }, "action_statement": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31036" }, "action_statement": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31102" }, "action_statement": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-31105" }, "action_statement": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2022-41354" }, "action_statement": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22482" }, "action_statement": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:09:50.237346+00:00", "status_notes": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-22736" }, "action_statement": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:17:19.590664+00:00", "status_notes": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-23947" }, "action_statement": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40025" }, "action_statement": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40026" }, "action_statement": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40029" }, "action_statement": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:26:31.016022+00:00", "status_notes": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-40584" }, "action_statement": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2023-50726" }, "action_statement": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-28175" }, "action_statement": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31989" }, "action_statement": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-31990" }, "action_statement": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:42:05.076696+00:00", "status_notes": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-32476" }, "action_statement": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-36106" }, "action_statement": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-37152" }, "action_statement": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-40634" }, "action_statement": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T15:52:27.770861+00:00", "status_notes": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2024-41666" }, "action_statement": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T16:21:39.337983+00:00", "status_notes": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-23216" }, "action_statement": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T16:39:44.193839+00:00", "status_notes": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-47933" }, "action_statement": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55190" }, "action_statement": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-55191" }, "action_statement": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59531" }, "action_statement": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59537" }, "action_statement": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2025-59538" }, "action_statement": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T14:43:41.647513+00:00", "status_notes": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-42880" }, "action_statement": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45737" }, "action_statement": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3", "identifiers": { "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3.", "vulnerability": { "name": "CVE-2026-45738" }, "action_statement": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.4", "identifiers": { "purl": "pkg:golang/github.com/grafana/loki/v3@3.2.0-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-21726 is fixed in version 3.2.0-tuxcare.4 of github.com/grafana/loki/v3.", "vulnerability": { "name": "CVE-2026-21726" } }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2018-1000538 is a false positive for github.com/minio/minio RELEASE.2025-10-15T17-29-55Z-tuxcare.10. Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present.", "vulnerability": { "name": "CVE-2018-1000538" }, "impact_statement": "Fixed upstream in RELEASE.2018-05-16T23-35-33Z (write-to-RAM DoS via V4 presigned requests); our base RELEASE.2025-10-15T17-29-55Z is seven years newer, the vulnerable code is not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2025-27414 does not affect version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio. not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-27414" }, "impact_statement": "not_affected \u2014 CVE-2025-27414 describes an SFTP authentication bypass where MinIO would allow SSH key authentication for LDAP users who lack an sshPublicKey attribute. The target repository (MinIO RELEASE.2025-10-15T17-29-55Z-tuxcare.8) already contains the upstream vendor fix (commit 4c71f1b4e from 2025-02-27). The fix adds explicit validation in processLDAPAuthentication() at lines 263-269 of cmd/sftp-serve..." }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-33322 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33322" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-33419 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-33419" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-34204 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-34204" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-39414 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-39414" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-40344 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-40344" } }, { "status": "fixed", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-41145 is fixed in version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-41145" } }, { "status": "affected", "products": [ { "@id": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10", "identifiers": { "purl": "pkg:golang/github.com/minio/minio@0.0.0-RELEASE.2025-10-15T17-29-55Z-tuxcare.10" } } ], "timestamp": "2026-09-28T10:06:19.501447+00:00", "status_notes": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio.", "vulnerability": { "name": "CVE-2026-42600" }, "action_statement": "Vulnerability CVE-2026-42600 affects version RELEASE.2025-10-15T17-29-55Z-tuxcare.10 of github.com/minio/minio." } ], "@id": "urn:sha256:bd803b480383c7f455b3824bd9ceb1e2e99b9c99729f16bcdeb3fc9c8e8672f8" }