https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 04:53:26 +0000 https://db.gcve.eu/vuln/bit-grafana-2026-33374 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> https://db.gcve.eu/vuln/bit-grafana-2026-33374 https://db.gcve.eu/vuln/fkie_cve-2026-33374 <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> https://db.gcve.eu/vuln/fkie_cve-2026-33374 https://db.gcve.eu/vuln/ghsa-5mj5-pfmr-wxjp <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> https://db.gcve.eu/vuln/ghsa-5mj5-pfmr-wxjp https://db.gcve.eu/vuln/rhsa-2026:84422 <p>grafana: Grafana: Unauthorized configuration modification via status subresource grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API hono: hono: Security bypass via double path decoding</p> <p>grafana: Grafana: Unauthorized configuration modification via status subresource grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API hono: hono: Security bypass via double path decoding</p> https://db.gcve.eu/vuln/rhsa-2026:84422 https://db.gcve.eu/vuln/ubuntu-cve-2026-33374 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-33374