https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T04:53:26.178033+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-grafana-2026-33374 BIT-grafana-2026-33374 — Unbounded memory allocation in the Prometheus rule conversion API 2026-10-24T04:53:26.204433+00:00

Affected: Bitnami: grafana

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.

 https://db.gcve.eu/vuln/fkie_cve-2026-33374 fkie_cve-2026-33374 2026-10-24T04:53:26.204495+00:00

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.

 https://db.gcve.eu/vuln/ghsa-5mj5-pfmr-wxjp GHSA-5mj5-pfmr-wxjp 2026-10-24T04:53:26.204522+00:00

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.

 https://db.gcve.eu/vuln/rhsa-2026:84422 RHSA-2026:84422 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-24T04:53:26.204537+00:00

grafana: Grafana: Unauthorized configuration modification via status subresource grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API hono: hono: Security bypass via double path decoding

 https://db.gcve.eu/vuln/ubuntu-cve-2026-33374 UBUNTU-CVE-2026-33374 2026-10-24T04:53:26.204561+00:00

Affected: Ubuntu:16.04:LTS: grafana

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.