{"api_version":"v1","generated_at":"2026-10-09T19:10:00+00:00","product":{"cve_count":26,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-grafana-grafana-oss-fa7388148d66","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Grafana OSS","next_cursor":null,"observations":[{"affected":"Grafana OSS: 12.0.0 \u2264 12.0.10, 12.1.0 \u2264 12.1.10, 12.2.0 \u2264 12.2.11, 12.3.0 \u2264 12.3.11, 12.4.0 < 12.4.12, 13.0.0 < 13.0.10, 13.1.0 < 13.1.7, 13.2.0 < 13.2.3; Grafana Enterprise: 12.0.0 \u2264 12.0.10, 12.1.0 \u2264 12.1.10, 12.2.0 \u2264 12.2.11, 12.3.0 \u2264 12.3.11, 12.4.0 < 12.4.12, 13.0.0 < 13.0.10, 13.1.0 < 13.1.7, 13.2.0 < 13.2.3","affected_versions_present":true,"cve_id":"CVE-2026-13720","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13720","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-09-30T15:28:07.969Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-13720","primary_source":"","published":"2026-09-30T11:06:38.177Z"},{"affected":"Grafana OSS: 11.6.0 \u2264 11.6.17, 12.0.0, 12.1.0, 12.2.0, 12.3.0, 12.4.0 \u2264 12.4.10, 13.0.0 \u2264 13.0.8, 13.1.0 \u2264 13.1.5, 13.2.0 \u2264 13.2.1; Grafana Enterprise: 11.6.0 \u2264 11.6.17, 12.0.0, 12.1.0, 12.2.0, 12.3.0, 12.4.0 \u2264 12.4.10, 13.0.0 \u2264 13.0.8, 13.1.0 \u2264 13.1.5, 13.2.0 \u2264 13.2.1","affected_versions_present":true,"cve_id":"CVE-2026-15815","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-15815","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-19T03:56:26.777Z","patch_url":"","primary_source":"","published":"2026-09-17T20:47:01.006Z"},{"affected":"Grafana OSS: 12.3.0, 12.4.0 \u2264 12.4.10, 13.0.0 \u2264 13.0.8, 13.1.0 \u2264 13.1.5, 13.2.0 \u2264 13.2.1; Grafana Enterprise: 12.3.0, 12.4.0 \u2264 12.4.10, 13.0.0 \u2264 13.0.8, 13.1.0 \u2264 13.1.5, 13.2.0 \u2264 13.2.1","affected_versions_present":true,"cve_id":"CVE-2026-76154","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76154","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-09-18T17:34:10.251Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-76154","primary_source":"","published":"2026-09-17T20:22:55.718Z"},{"affected":"12.4.0 < 12.4.8; 13.0.0 < 13.0.6; 13.1.0 < 13.1.3","affected_versions_present":true,"cve_id":"CVE-2026-19197","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-19197","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:36.904Z","patch_url":"","primary_source":"","published":"2026-08-26T08:50:27.854Z"},{"affected":"\u2264 12.3.11; 12.4.0 \u2264 12.4.9; 13.0.0 \u2264 13.0.7","affected_versions_present":true,"cve_id":"CVE-2026-17033","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-17033","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:43.827Z","patch_url":"","primary_source":"","published":"2026-08-24T13:52:26.910Z"},{"affected":"8.4.0 < 12.3.11; 12.4.0 < 12.4.9; 13.0.0 < 13.0.7; 13.1.0 < 13.1.4","affected_versions_present":true,"cve_id":"CVE-2026-17183","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-17183","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:31.524Z","patch_url":"","primary_source":"","published":"2026-08-19T17:30:06.798Z"},{"affected":"Grafana OSS: 12.4.0 \u2264 12.4.5, 11.2.0 \u2264 11.6.16, 13.0.0 \u2264 13.0.3, 13.1.0 \u2264 13.1.0, 12.2.0 \u2264 12.2.10, 12.3.0 \u2264 12.3.8; Grafana Enterprise: 13.0.0 \u2264 13.0.3, 12.2.0 \u2264 12.2.10, 11.2.0 \u2264 11.6.16, 12.3.0 \u2264 12.3.8, 12.4.0 \u2264 12.4.5, 13.1.0 \u2264 13.1.0","affected_versions_present":true,"cve_id":"CVE-2026-11817","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-11817","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-14T10:16:35.588Z","patch_url":"","primary_source":"","published":"2026-08-17T21:28:17.497Z"},{"affected":"8.0.0 \u2264 11.0.0; 11.0.0 \u2264 11.6.10; 12.0.0 \u2264 12.0.9; 12.1.0 \u2264 12.1.6; 12.2.0 \u2264 12.2.4; 12.3.0 \u2264 12.3.2","affected_versions_present":true,"cve_id":"CVE-2026-21723","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21723","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:29.672Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-21723","primary_source":"","published":"2026-07-23T01:48:16.245Z"},{"affected":"12.4.0 \u2264 12.4.3; 13.0.0 \u2264 13.0.1","affected_versions_present":true,"cve_id":"CVE-2026-8595","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-8595","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:45.998Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-8595","primary_source":"","published":"2026-07-10T14:59:35.891Z"},{"affected":"11.6.0 \u2264 11.6.14; 12.2.0 \u2264 12.2.8; 12.3.0 \u2264 12.3.6; 12.4.0 \u2264 12.4.3; 13.0.0 \u2264 13.0.1","affected_versions_present":true,"cve_id":"CVE-2026-8609","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-8609","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258","last_modified":"2026-08-27T17:22:37.575Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-8609","primary_source":"","published":"2026-07-10T14:58:33.522Z"},{"affected":"11.6.0 \u2264 11.6.14; 12.2.0 \u2264 12.2.8; 12.3.0 \u2264 12.3.6; 12.4.0 \u2264 12.4.3; 13.0.0 \u2264 13.0.1","affected_versions_present":true,"cve_id":"CVE-2026-33382","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33382","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258","last_modified":"2026-08-27T17:22:28.355Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-33382","primary_source":"","published":"2026-07-10T14:58:23.329Z"},{"affected":"12.4.0 \u2264 12.4.3; 13.0.0 \u2264 13.0.1","affected_versions_present":true,"cve_id":"CVE-2026-9029","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-9029","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:27.685Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-9029","primary_source":"","published":"2026-06-22T13:18:40.770Z"},{"affected":"11.6.0 \u2264 11.6.14; 12.2.0 \u2264 12.2.8; 12.3.0 \u2264 12.3.6; 12.4.0 \u2264 12.4.3; 13.0.0 \u2264 13.0.1","affected_versions_present":true,"cve_id":"CVE-2026-10601","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-10601","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:42.795Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-10601","primary_source":"","published":"2026-06-22T13:18:31.531Z"},{"affected":"11.6.0 \u2264 11.6.14; 12.2.0 \u2264 12.2.8; 12.3.0 \u2264 12.3.6; 12.4.0 \u2264 12.4.3; 13.0.0 \u2264 13.0.1","affected_versions_present":true,"cve_id":"CVE-2026-42129","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42129","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:32.860Z","patch_url":"","primary_source":"","published":"2026-06-22T13:18:27.365Z"},{"affected":"8.5.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-28374","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28374","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:38.240Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-28374","primary_source":"","published":"2026-05-13T19:28:40.053Z"},{"affected":"8.0.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-33378","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33378","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:48.777Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-33378","primary_source":"","published":"2026-05-13T19:28:37.606Z"},{"affected":"6.7.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-28383","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28383","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:21.832Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-28383","primary_source":"","published":"2026-05-13T19:28:36.952Z"},{"affected":"9.4.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-33376","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33376","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258","last_modified":"2026-08-27T17:22:50.919Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-33376","primary_source":"","published":"2026-05-13T19:28:34.473Z"},{"affected":"11.6.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-33380","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33380","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:19.705Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-33380","primary_source":"","published":"2026-05-13T19:28:32.915Z"},{"affected":"9.4.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-28380","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28380","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:39.589Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-28380","primary_source":"","published":"2026-05-13T19:28:32.257Z"},{"affected":"9.2.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-33381","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33381","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:46.706Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-33381","primary_source":"","published":"2026-05-13T19:28:31.559Z"},{"affected":"8.5.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-33377","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33377","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258","last_modified":"2026-08-27T17:22:32.185Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-33377","primary_source":"","published":"2026-05-13T19:28:28.154Z"},{"affected":"8.0.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-28376","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28376","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:45.329Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-28376","primary_source":"","published":"2026-05-13T19:28:26.544Z"},{"affected":"8.2.0 \u2264 11.6.14; 11.6.14 < 11.6.14+security-04; 12.0.0 \u2264 12.2.8; 12.2.8 < 12.2.8+security-04; 12.3.0 \u2264 12.3.6; 12.3.6 < 12.3.6+security-04; 12.4.0 \u2264 12.4.3; 12.4.3 < 12.4.3+security-02","affected_versions_present":true,"cve_id":"CVE-2026-28379","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28379","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/","last_modified":"2026-08-27T17:22:26.322Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-28379","primary_source":"","published":"2026-05-13T19:28:25.836Z"},{"affected":"12.3.1 < 12.3.6; 12.2.2 < 12.2.8; 12.1.5 < 12.1.10; 11.6.9 < 11.6.14","affected_versions_present":true,"cve_id":"CVE-2026-21724","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21724","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:23.621Z","patch_url":"","primary_source":"","published":"2026-03-26T20:06:18.829Z"},{"affected":"11.6.0 < 11.6.14+security-01; 12.1.0 < 12.1.10+security-01; 12.2.0 < 12.2.8+security-01; 12.3.0 < 12.3.6+security-01; 12.4.0 < 12.4.2","affected_versions_present":true,"cve_id":"CVE-2026-33375","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33375","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:22:41.503Z","patch_url":"","primary_source":"","published":"2026-03-26T20:05:52.564Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Grafana"}}