https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 23:42:22 +0000 https://db.gcve.eu/vuln/bit-grafana-2026-93294 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source&#39;s Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source&#39;s Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.</p> https://db.gcve.eu/vuln/bit-grafana-2026-93294 https://db.gcve.eu/vuln/fkie_cve-2026-93294 <p>A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source&#39;s Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.</p> <p>A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source&#39;s Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.</p> https://db.gcve.eu/vuln/fkie_cve-2026-93294 https://db.gcve.eu/vuln/ghsa-5wf9-m99g-f6xj <p>A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source&#39;s Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.</p> <p>A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source&#39;s Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.</p> https://db.gcve.eu/vuln/ghsa-5wf9-m99g-f6xj https://db.gcve.eu/vuln/rhsa-2026:85295 <p>grafana: Grafana: Unauthorized cross-organization user management via the SCIM API grafana: Grafana: Information disclosure via Azure Monitor resource proxy hono: hono: Information disclosure via malformed percent-encoded paths in serveStatic</p> <p>grafana: Grafana: Unauthorized cross-organization user management via the SCIM API grafana: Grafana: Information disclosure via Azure Monitor resource proxy hono: hono: Information disclosure via malformed percent-encoded paths in serveStatic</p> https://db.gcve.eu/vuln/rhsa-2026:85295