Veille CVE

Recherche « Grafana PostgreSQL Datasource »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Grafana PostgreSQL Datasource » ✕
  1. CVE-2026-19475 6.5 Moyenne

    Grafana PostgreSQL Datasource · Grafana MySQL Datasource · Grafana OSS · Grafana Microsoft SQL Server Datasource

    An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can terminate the Grafana server process, resulting in a denial of service. The Microsoft SQL Server, PostgreSQL, and MySQL data sources are affected.