Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01, 11.5.5+security-01, 11.6.2+security-01 and 12.0.1+security-01
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade grafana9Upgrade grafanaUpgrade grafana8 | Dec 10, 2025 | Jun 18, 2025 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 24, 2025 |
| Suse | — | Upgrade supportutils-plugin-susemanager-clientUpgrade dracut-saltbootUpgrade spacecmdUpgrade govulncheck-vulndbUpgrade grafana | Nov 4, 2025 | Oct 28, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub