{"api_version":"v1","generated_at":"2026-10-10T04:35:00+00:00","product":{"cve_count":3,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-grafana-grafana-grafana-d35d53e28d68","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"grafana/grafana","next_cursor":null,"observations":[{"affected":"12.2.0 < 12.2.4+security-01; 12.3.0 < 12.3.2+security-01","affected_versions_present":true,"cve_id":"CVE-2025-41117","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-41117","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:52.803Z","patch_url":"","primary_source":"","published":"2026-02-12T08:49:08.545Z"},{"affected":"9.3.0 < 11.6.10+security-01; 12.0.0 < 12.1.6+security-01; 12.2.0 < 12.2.4+security-01; 12.3.0 < 12.3.2+security-01","affected_versions_present":true,"cve_id":"CVE-2026-21722","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21722","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:42.160Z","patch_url":"","primary_source":"","published":"2026-02-12T08:49:05.678Z"},{"affected":"12.3.0 < 12.3.1; 12.2.0 < 12.2.3; 12.1.0 < 12.1.5; 12.0.0 < 12.0.8; 10.2.0 < 11.6.9","affected_versions_present":true,"cve_id":"CVE-2026-21721","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21721","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258","last_modified":"2026-08-27T17:22:33.569Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-21721","primary_source":"","published":"2026-01-27T09:07:55.160Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Grafana"}}