Grafana: >> Grafana >> 12.3.3 Security Vulnerabilities
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
CVSS Score
6.5
EPSS Score
0.0
Published
2026-03-26
A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.
CVSS Score
5.4
EPSS Score
0.0
Published
2026-03-26