{"id":"EUVD-2026-38243","enisaUuid":"be55810a-1953-3113-a2a2-c41e058ac365","description":"A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel\u0027s XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard (stored cross-site scripting).","datePublished":"Jun 22, 2026, 1:18:40 PM","dateUpdated":"Aug 27, 2026, 5:22:27 PM","baseScore":7.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","references":"https://grafana.com/security/security-advisories/cve-2026-9029\n","aliases":"CVE-2026-9029\nGHSA-9g84-39mm-q4p3\n","assigner":"GRAFANA","epss":0.25,"enisaIdProduct":[{"id":"020c8c63-ece3-3ad8-aa1c-f5c665639fa0","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.4.0 ≤12.4.3"},{"id":"dc7f7d46-1d1e-32e5-a00e-8ba082070464","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"13.0.0 ≤13.0.1"}],"enisaIdVendor":[{"id":"e56289a5-9941-3d79-9e9c-e445dcb47f5e","vendor":{"name":"Grafana"}}],"enisaIdVulnerability":[{"id":"ab67ac9b-ceea-30d6-bf64-bc12fa0952b3","vulnerability":{"id":"GHSA-9g84-39mm-q4p3","description":"Grafana geomap panel\u0027s XYZ tile layer has a sanitize-then-interpolate ordering bug","datePublished":"Jun 22, 2026, 3:30:46 PM","dateUpdated":"Sep 21, 2026, 10:56:35 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-9029\nhttps://github.com/grafana/grafana/commit/3fcdbc5a6e5c955bd42bd3715dd03cbad2b078c1\nhttps://github.com/grafana/grafana/commit/42cdc39124912a8506a0c613c319c345aa950b29\nhttps://github.com/grafana/grafana/commit/82ef13993059351bf21de35b8488bbd9b42df4f4\nhttps://github.com/grafana/grafana/commit/dc695b9649530064e19c7c120bd6ebe104908e58\nhttps://github.com/grafana/grafana\nhttps://github.com/grafana/grafana/releases/tag/v12.4.4\nhttps://github.com/grafana/grafana/releases/tag/v13.0.2\nhttps://grafana.com/security/security-advisories/cve-2026-9029\n","enisa_id":"EUVD-2026-38243\n","aliases":"CVE-2026-9029\nGHSA-9g84-39mm-q4p3\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fccd13bb-bb3e-3752-85a6-3f56816eec35","vulnerability":{"id":"CVE-2026-9029","description":"A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel\u0027s XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard (stored cross-site scripting).","datePublished":"Jun 22, 2026, 1:18:40 PM","dateUpdated":"Aug 27, 2026, 5:22:27 PM","status":"PUBLISHED","baseScore":7.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","references":"https://grafana.com/security/security-advisories/cve-2026-9029\n","enisa_id":"EUVD-2026-38243\n","assigner":"GRAFANA","epss":0.25,"dataProcessed":"Nov 7, 2026, 7:22:11 AM","vulnerabilityProduct":[{"id":"053eb83b-6f1f-3086-af37-8c5c35520402","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"13.0.0 ≤13.0.1"},{"id":"a3f4d3f0-a087-3225-98a0-85bf264b10b0","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.4.0 ≤12.4.3"}],"vulnerabilityVendor":[{"id":"0625c73f-3309-3834-81a9-f54f690e4f45","vendor":{"name":"Grafana"}}]}}],"enisaIdAdvisory":[{"id":"026b2c0c-23ec-3bc7-94b4-1653b056a275","advisory":{"id":"SUSE-SU-2026:4600-1","description":"Security update for grafana, system-user-grafana","summary":"Security update for grafana, system-user-grafana","datePublished":"Oct 9, 2026, 8:54:30 AM","dateUpdated":"Oct 9, 2026, 6:04:10 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4600-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20264600-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20264600-1/\nhttps://bugzilla.suse.com/1262187\nhttps://bugzilla.suse.com/1263330\nhttps://bugzilla.suse.com/1265525\nhttps://bugzilla.suse.com/1265763\nhttps://bugzilla.suse.com/1268868\nhttps://bugzilla.suse.com/1269841\nhttps://bugzilla.suse.com/1271330\nhttps://bugzilla.suse.com/1271557\nhttps://bugzilla.suse.com/1272008\nhttps://bugzilla.suse.com/1272328\nhttps://bugzilla.suse.com/1272427\nhttps://bugzilla.suse.com/1274217\nhttps://bugzilla.suse.com/1275934\nhttps://bugzilla.suse.com/1276426\nhttps://bugzilla.suse.com/1276658\nhttps://bugzilla.suse.com/1276973\nhttps://bugzilla.suse.com/1277025\nhttps://bugzilla.suse.com/1278307\nhttps://bugzilla.suse.com/1278322\nhttps://www.suse.com/security/cve/CVE-2026-1229/\nhttps://www.suse.com/security/cve/CVE-2026-14199/\nhttps://www.suse.com/security/cve/CVE-2026-17033/\nhttps://www.suse.com/security/cve/CVE-2026-17183/\nhttps://www.suse.com/security/cve/CVE-2026-19197/\nhttps://www.suse.com/security/cve/CVE-2026-19475/\nhttps://www.suse.com/security/cve/CVE-2026-21723/\nhttps://www.suse.com/security/cve/CVE-2026-2303/\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-39882/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41606/\nhttps://www.suse.com/security/cve/CVE-2026-42127/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-73501/\nhttps://www.suse.com/security/cve/CVE-2026-8595/\nhttps://www.suse.com/security/cve/CVE-2026-8609/\nhttps://www.suse.com/security/cve/CVE-2026-9029/\n","aliases":"CVE-2026-1229\nCVE-2026-14199\nCVE-2026-17033\nCVE-2026-17183\nCVE-2026-19197\nCVE-2026-19475\nCVE-2026-21723\nCVE-2026-2303\nCVE-2026-33814\nCVE-2026-39882\nCVE-2026-41178\nCVE-2026-41606\nCVE-2026-42127\nCVE-2026-56852\nCVE-2026-73501\nCVE-2026-8595\nCVE-2026-8609\nCVE-2026-9029\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"265e5e4f-3fb3-3d6e-a601-708bd6639f98","product":{"name":"SUSE Linux Enterprise Module for Package Hub 15 SP7","vendor":{"name":"SUSE"}}},{"id":"63cee0fd-b941-34e2-a45c-443120b121a3","product":{"name":"grafana-0:12.4.10-150200.3.94.3.aarch64","vendor":{"name":"SUSE"}}},{"id":"728ff585-7556-3f67-a441-3a6bd8338c78","product":{"name":"system-user-grafana-0:1.0.0-150200.5.8.1.noarch","vendor":{"name":"SUSE"}}},{"id":"bf6d348e-b3aa-32f2-a931-55b09bb173c5","product":{"name":"grafana-0:12.4.10-150200.3.94.3.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d9ca221a-ffc1-3287-9df6-93a49f9840c0","product":{"name":"grafana-0:12.4.10-150200.3.94.3.x86_64","vendor":{"name":"SUSE"}}},{"id":"f78a3109-636e-3a50-9239-271d8ce732f2","product":{"name":"grafana-0:12.4.10-150200.3.94.3.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"20ead891-3894-3c00-9a6f-ec2ff3e50c5e","advisory":{"id":"openSUSE-SU-2026:11619-1","description":"grafana-12.4.5-4.1 on GA media","summary":"grafana-12.4.5-4.1 on GA media","datePublished":"Aug 27, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:21:31 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11619-1.json\nhttps://www.suse.com/security/cve/CVE-2026-1229/\nhttps://www.suse.com/security/cve/CVE-2026-21723/\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-39882/\nhttps://www.suse.com/security/cve/CVE-2026-8609/\nhttps://www.suse.com/security/cve/CVE-2026-9029/\n","aliases":"CVE-2026-1229\nCVE-2026-21723\nCVE-2026-33814\nCVE-2026-39882\nCVE-2026-8609\nCVE-2026-9029\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0255d29c-bb40-3ad2-ad09-12a7021bc749","product":{"name":"grafana-0:12.4.5-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1d944fe4-2dfa-36dc-9315-a8b57785df4f","product":{"name":"grafana-0:12.4.5-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3173777d-29f9-3e2c-8df1-4d53f01b0d38","product":{"name":"grafana-0:12.4.5-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"34a95847-d895-38d3-a821-149d87810e02","product":{"name":"grafana-12.4.5-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"47f2ef7e-bbe6-3830-848e-395505e08db5","product":{"name":"grafana-12.4.5-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"801a0825-50f4-39ac-858c-8cdaa24e6515","product":{"name":"grafana-12.4.5-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"92d42d28-4c0e-302c-b760-adee9f68a51d","product":{"name":"grafana-0:12.4.5-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"be312a35-6d3a-3486-ad26-bb0348f30b84","product":{"name":"grafana-12.4.5-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ced68d28-22c6-376f-a209-272247f9c02d","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}}]}},{"id":"2d9cb053-1b7d-397b-a4b4-0d17997fb884","advisory":{"id":"SUSE-SU-2026:4585-1","description":"Security update 5.2.1 for Multi-Linux Manager Client Tools","summary":"Security update 5.2.1 for Multi-Linux Manager Client Tools","datePublished":"Oct 8, 2026, 8:24:34 AM","dateUpdated":"Oct 28, 2026, 5:55:37 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4585-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20264585-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20264585-1/\nhttps://bugzilla.suse.com/1218722\nhttps://bugzilla.suse.com/1230949\nhttps://bugzilla.suse.com/1252286\nhttps://bugzilla.suse.com/1254400\nhttps://bugzilla.suse.com/1257151\nhttps://bugzilla.suse.com/1257599\nhttps://bugzilla.suse.com/1259989\nhttps://bugzilla.suse.com/1261969\nhttps://bugzilla.suse.com/1261970\nhttps://bugzilla.suse.com/1262098\nhttps://bugzilla.suse.com/1262187\nhttps://bugzilla.suse.com/1262319\nhttps://bugzilla.suse.com/1262429\nhttps://bugzilla.suse.com/1262492\nhttps://bugzilla.suse.com/1262654\nhttps://bugzilla.suse.com/1262803\nhttps://bugzilla.suse.com/1263254\nhttps://bugzilla.suse.com/1263330\nhttps://bugzilla.suse.com/1263442\nhttps://bugzilla.suse.com/1263822\nhttps://bugzilla.suse.com/1263823\nhttps://bugzilla.suse.com/1264962\nhttps://bugzilla.suse.com/1265267\nhttps://bugzilla.suse.com/1265268\nhttps://bugzilla.suse.com/1265413\nhttps://bugzilla.suse.com/1265525\nhttps://bugzilla.suse.com/1265763\nhttps://bugzilla.suse.com/1266481\nhttps://bugzilla.suse.com/1266608\nhttps://bugzilla.suse.com/1266669\nhttps://bugzilla.suse.com/1267261\nhttps://bugzilla.suse.com/1267528\nhttps://bugzilla.suse.com/1267534\nhttps://bugzilla.suse.com/1267538\nhttps://bugzilla.suse.com/1267581\nhttps://bugzilla.suse.com/1267821\nhttps://bugzilla.suse.com/1267980\nhttps://bugzilla.suse.com/1268325\nhttps://bugzilla.suse.com/1268395\nhttps://bugzilla.suse.com/1268396\nhttps://bugzilla.suse.com/1268397\nhttps://bugzilla.suse.com/1268649\nhttps://bugzilla.suse.com/1268755\nhttps://bugzilla.suse.com/1268868\nhttps://bugzilla.suse.com/1268977\nhttps://bugzilla.suse.com/1269066\nhttps://bugzilla.suse.com/1269788\nhttps://bugzilla.suse.com/1269841\nhttps://bugzilla.suse.com/1269856\nhttps://bugzilla.suse.com/1269959\nhttps://bugzilla.suse.com/1269966\nhttps://bugzilla.suse.com/1270033\nhttps://bugzilla.suse.com/1270285\nhttps://bugzilla.suse.com/1270398\nhttps://bugzilla.suse.com/1270399\nhttps://bugzilla.suse.com/1270711\nhttps://bugzilla.suse.com/1271192\nhttps://bugzilla.suse.com/1271330\nhttps://bugzilla.suse.com/1271428\nhttps://bugzilla.suse.com/1271557\nhttps://bugzilla.suse.com/1271613\nhttps://bugzilla.suse.com/1272008\nhttps://bugzilla.suse.com/1272102\nhttps://bugzilla.suse.com/1272328\nhttps://bugzilla.suse.com/1272427\nhttps://bugzilla.suse.com/1273094\nhttps://bugzilla.suse.com/1273144\nhttps://bugzilla.suse.com/1274217\nhttps://bugzilla.suse.com/1274221\nhttps://bugzilla.suse.com/1275205\nhttps://bugzilla.suse.com/1275206\nhttps://bugzilla.suse.com/1275207\nhttps://bugzilla.suse.com/1275934\nhttps://bugzilla.suse.com/1276426\nhttps://bugzilla.suse.com/1276658\nhttps://bugzilla.suse.com/1276973\nhttps://bugzilla.suse.com/1277025\nhttps://bugzilla.suse.com/1278307\nhttps://bugzilla.suse.com/1278322\nhttps://www.suse.com/security/cve/CVE-2023-45289/\nhttps://www.suse.com/security/cve/CVE-2024-22195/\nhttps://www.suse.com/security/cve/CVE-2025-13836/\nhttps://www.suse.com/security/cve/CVE-2025-4673/\nhttps://www.suse.com/security/cve/CVE-2025-61686/\nhttps://www.suse.com/security/cve/CVE-2026-0864/\nhttps://www.suse.com/security/cve/CVE-2026-11940/\nhttps://www.suse.com/security/cve/CVE-2026-11972/\nhttps://www.suse.com/security/cve/CVE-2026-1229/\nhttps://www.suse.com/security/cve/CVE-2026-13346/\nhttps://www.suse.com/security/cve/CVE-2026-14199/\nhttps://www.suse.com/security/cve/CVE-2026-1502/\nhttps://www.suse.com/security/cve/CVE-2026-15308/\nhttps://www.suse.com/security/cve/CVE-2026-1703/\nhttps://www.suse.com/security/cve/CVE-2026-17033/\nhttps://www.suse.com/security/cve/CVE-2026-17183/\nhttps://www.suse.com/security/cve/CVE-2026-19197/\nhttps://www.suse.com/security/cve/CVE-2026-19475/\nhttps://www.suse.com/security/cve/CVE-2026-21723/\nhttps://www.suse.com/security/cve/CVE-2026-2303/\nhttps://www.suse.com/security/cve/CVE-2026-27459/\nhttps://www.suse.com/security/cve/CVE-2026-3219/\nhttps://www.suse.com/security/cve/CVE-2026-3276/\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-3446/\nhttps://www.suse.com/security/cve/CVE-2026-3479/\nhttps://www.suse.com/security/cve/CVE-2026-39821/\nhttps://www.suse.com/security/cve/CVE-2026-39882/\nhttps://www.suse.com/security/cve/CVE-2026-40181/\nhttps://www.suse.com/security/cve/CVE-2026-40475/\nhttps://www.suse.com/security/cve/CVE-2026-41066/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41606/\nhttps://www.suse.com/security/cve/CVE-2026-42127/\nhttps://www.suse.com/security/cve/CVE-2026-42211/\nhttps://www.suse.com/security/cve/CVE-2026-42342/\nhttps://www.suse.com/security/cve/CVE-2026-4360/\nhttps://www.suse.com/security/cve/CVE-2026-44431/\nhttps://www.suse.com/security/cve/CVE-2026-44990/\nhttps://www.suse.com/security/cve/CVE-2026-45409/\nhttps://www.suse.com/security/cve/CVE-2026-4786/\nhttps://www.suse.com/security/cve/CVE-2026-49825/\nhttps://www.suse.com/security/cve/CVE-2026-49853/\nhttps://www.suse.com/security/cve/CVE-2026-49854/\nhttps://www.suse.com/security/cve/CVE-2026-49855/\nhttps://www.suse.com/security/cve/CVE-2026-53606/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-6019/\nhttps://www.suse.com/security/cve/CVE-2026-6100/\nhttps://www.suse.com/security/cve/CVE-2026-6357/\nhttps://www.suse.com/security/cve/CVE-2026-7210/\nhttps://www.suse.com/security/cve/CVE-2026-73501/\nhttps://www.suse.com/security/cve/CVE-2026-7774/\nhttps://www.suse.com/security/cve/CVE-2026-8328/\nhttps://www.suse.com/security/cve/CVE-2026-8595/\nhttps://www.suse.com/security/cve/CVE-2026-8609/\nhttps://www.suse.com/security/cve/CVE-2026-8643/\nhttps://www.suse.com/security/cve/CVE-2026-9029/\n","aliases":"CVE-2023-45289\nCVE-2024-22195\nCVE-2025-13836\nCVE-2025-4673\nCVE-2025-61686\nCVE-2026-0864\nCVE-2026-11940\nCVE-2026-11972\nCVE-2026-1229\nCVE-2026-13346\nCVE-2026-14199\nCVE-2026-1502\nCVE-2026-15308\nCVE-2026-1703\nCVE-2026-17033\nCVE-2026-17183\nCVE-2026-19197\nCVE-2026-19475\nCVE-2026-21723\nCVE-2026-2303\nCVE-2026-27459\nCVE-2026-3219\nCVE-2026-3276\nCVE-2026-33814\nCVE-2026-3446\nCVE-2026-3479\nCVE-2026-39821\nCVE-2026-39882\nCVE-2026-40181\nCVE-2026-40475\nCVE-2026-41066\nCVE-2026-41178\nCVE-2026-41606\nCVE-2026-42127\nCVE-2026-42211\nCVE-2026-42342\nCVE-2026-4360\nCVE-2026-44431\nCVE-2026-44990\nCVE-2026-45409\nCVE-2026-4786\nCVE-2026-49825\nCVE-2026-49853\nCVE-2026-49854\nCVE-2026-49855\nCVE-2026-53606\nCVE-2026-56852\nCVE-2026-6019\nCVE-2026-6100\nCVE-2026-6357\nCVE-2026-7210\nCVE-2026-73501\nCVE-2026-7774\nCVE-2026-8328\nCVE-2026-8595\nCVE-2026-8609\nCVE-2026-8643\nCVE-2026-9029\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1add67f2-898f-3ca7-9d33-a86eacc9c518","product":{"name":"mgrctl-0:5.2.17-150002.3.20.1.s390x","vendor":{"name":"SUSE"}}},{"id":"20fdd3f7-ab81-3bae-a702-d114fd348cde","product":{"name":"mgr-push-0:5.2.5-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"233f1ed4-c1de-3264-98ca-6098026b859f","product":{"name":"mgrctl-zsh-completion-0:5.2.17-150002.3.20.1.noarch","vendor":{"name":"SUSE"}}},{"id":"2d21a449-386c-3625-8956-d0b4c9466a8f","product":{"name":"golang-github-prometheus-prometheus-0:3.13.2-150002.3.19.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"31635dae-0cef-3733-aded-52cf97b732aa","product":{"name":"python3-mgr-push-0:5.2.5-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"3723ee99-be46-3235-9cbe-349ea9f64539","product":{"name":"venv-salt-minion-0:3006.0-150002.5.22.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"388c6df9-c504-33e4-97d0-5b881cda103a","product":{"name":"grafana-0:12.4.10-150002.4.27.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3fed8d07-0167-3473-8f1e-a70b9189bdf2","product":{"name":"mgrctl-0:5.2.17-150002.3.20.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"405e3662-90e9-3ca4-88b1-0a903076ce9c","product":{"name":"firewalld-prometheus-config-0:0.2-150002.3.19.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4f3a0058-0e81-3414-aa9c-1010d3b14912","product":{"name":"SUSE Multi Linux Manager Tools SLE-15","vendor":{"name":"SUSE"}}},{"id":"50f42e30-e539-3bb9-a885-4ad85d0b1f88","product":{"name":"venv-salt-minion-0:3006.0-150002.5.22.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5473f66d-0449-3c80-99bf-2631f863b7e5","product":{"name":"golang-github-prometheus-prometheus-0:3.13.2-150002.3.19.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"54cbe205-1be4-33e6-b096-c1872505326a","product":{"name":"mgrctl-lang-0:5.2.17-150002.3.20.1.noarch","vendor":{"name":"SUSE"}}},{"id":"66829bf3-bb16-3de4-a1aa-2b778474b8db","product":{"name":"mgrctl-0:5.2.17-150002.3.20.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"787c74a6-05e9-3078-9f8a-876926680587","product":{"name":"mgrctl-0:5.2.17-150002.3.20.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"89f8a1fe-22a5-3093-81e4-7f52b7bb0b47","product":{"name":"spacecmd-0:5.2.10-150002.3.15.1.noarch","vendor":{"name":"SUSE"}}},{"id":"905582f6-5a15-30b8-84d6-66f8f7de7765","product":{"name":"venv-salt-minion-0:3006.0-150002.5.22.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9357caf8-1981-37df-b981-a93eaad19936","product":{"name":"firewalld-prometheus-config-0:0.2-150002.3.19.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a1bb16bd-74d6-3aee-9543-b80a09767fc9","product":{"name":"grafana-0:12.4.10-150002.4.27.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"add562c8-c779-3213-adc9-0826bee55fa1","product":{"name":"golang-github-prometheus-prometheus-0:3.13.2-150002.3.19.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c3c3679e-9341-3b14-947a-6a227518df94","product":{"name":"firewalld-prometheus-config-0:0.2-150002.3.19.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c8296c94-1ceb-3aa8-9e00-42655a5375de","product":{"name":"grafana-0:12.4.10-150002.4.27.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cf884f1d-5a70-34cc-9446-1b8a1d1193f5","product":{"name":"python3-spacewalk-client-tools-0:5.2.7-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"d472dc82-6399-3910-9999-ca13c570c9c2","product":{"name":"golang-github-prometheus-prometheus-0:3.13.2-150002.3.19.1.s390x","vendor":{"name":"SUSE"}}},{"id":"df581c60-9fee-3843-96dc-ce32ab6211c1","product":{"name":"spacewalk-client-tools-0:5.2.7-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"ef20a8b9-d039-3282-81a2-55a12cab7094","product":{"name":"SUSE Multi Linux Manager Tools SLE-Micro-5","vendor":{"name":"SUSE"}}},{"id":"ef6005a5-ce4b-36e6-a372-f30abc174747","product":{"name":"grafana-0:12.4.10-150002.4.27.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f006d838-ff6c-3190-b4bb-8651419047fd","product":{"name":"mgrctl-bash-completion-0:5.2.17-150002.3.20.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f2966357-89b5-3ab5-bcea-6f34c21193dd","product":{"name":"firewalld-prometheus-config-0:0.2-150002.3.19.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f2e65591-e63e-3380-b57d-3e5331682ff8","product":{"name":"venv-salt-minion-0:3006.0-150002.5.22.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"36032beb-187f-341e-9548-1ec1d0ae3ef0","advisory":{"id":"RHSA-2026:67605","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 15, 2026, 2:39:47 PM","dateUpdated":"Oct 20, 2026, 4:08:51 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:67605\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67605.json\n","aliases":"CVE-2026-9029\nCVE-2026-10601\nCVE-2026-61709\nCVE-2026-90771\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"70affe73-152c-34fd-98ab-df94e7ed21d1","product":{"name":"grafana13.2-0:13.2.1-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"c1a7aab4-cb18-3bed-91ad-71660f08d206","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"d353b9ba-fa4b-3e79-b709-8dc5ff9c16ed","product":{"name":"grafana13.2-0:13.2.1-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"dd0bdc38-80ed-3c6f-bd1e-577f22159d9b","product":{"name":"grafana13.2-0:13.2.1-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"3653d10c-7e6a-3251-9809-c4d4805990c9","advisory":{"id":"RHSA-2026:68143","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 16, 2026, 2:22:20 PM","dateUpdated":"Oct 30, 2026, 7:27:21 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68143\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68143.json\n","aliases":"CVE-2026-9029\nCVE-2026-10601\nCVE-2026-86472\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2627fa92-41c0-3bec-b413-fec9369d2801","product":{"name":"grafana12.4-0:12.4.10-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a3260608-964c-39f8-a330-1c2c201c4f21","product":{"name":"grafana12.4-0:12.4.10-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a5e92a96-807d-3f22-9b3a-71d3d5b0c649","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"c0afb105-6df3-388c-86c8-8495a0026968","product":{"name":"grafana12.4-0:12.4.10-0.4.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"5743651a-3b0f-3e61-b0d7-9997c1ee694c","advisory":{"id":"RHSA-2026:67573","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 15, 2026, 2:19:34 PM","dateUpdated":"Oct 23, 2026, 4:06:31 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:67573\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67573.json\n","aliases":"CVE-2026-9029\nCVE-2026-10601\nCVE-2026-75838\nCVE-2026-90771\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"207d4e7b-7044-3202-bafc-ff312719eeec","product":{"name":"grafana13.1-0:13.1.3-0.9.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"41057ed4-db60-3582-86a2-cf1e0316deba","product":{"name":"grafana13.1-0:13.1.3-0.9.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"938ec239-a7a6-37d5-8c2c-4f7e4aef0ece","product":{"name":"grafana13.1-0:13.1.3-0.9.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ce9dc593-3f14-326e-93bf-c52ca21be0bc","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"e1146c11-9e61-3201-b3fa-bdd2e98a3582","advisory":{"id":"openSUSE-SU-2026:22125-1","description":"Security update for grafana","summary":"Security update for grafana","datePublished":"Oct 19, 2026, 4:37:11 PM","dateUpdated":"Oct 21, 2026, 11:53:42 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22125-1.json\nhttps://bugzilla.suse.com/1263330\nhttps://bugzilla.suse.com/1265525\nhttps://bugzilla.suse.com/1265763\nhttps://bugzilla.suse.com/1268868\nhttps://bugzilla.suse.com/1269841\nhttps://bugzilla.suse.com/1271330\nhttps://bugzilla.suse.com/1272008\nhttps://bugzilla.suse.com/1272328\nhttps://bugzilla.suse.com/1272427\nhttps://bugzilla.suse.com/1274217\nhttps://bugzilla.suse.com/1275934\nhttps://bugzilla.suse.com/1276426\nhttps://bugzilla.suse.com/1276658\nhttps://bugzilla.suse.com/1276973\nhttps://bugzilla.suse.com/1277025\nhttps://bugzilla.suse.com/1278307\nhttps://bugzilla.suse.com/1278322\nhttps://www.suse.com/security/cve/CVE-2026-1229/\nhttps://www.suse.com/security/cve/CVE-2026-14199/\nhttps://www.suse.com/security/cve/CVE-2026-17033/\nhttps://www.suse.com/security/cve/CVE-2026-17183/\nhttps://www.suse.com/security/cve/CVE-2026-19197/\nhttps://www.suse.com/security/cve/CVE-2026-19475/\nhttps://www.suse.com/security/cve/CVE-2026-21723/\nhttps://www.suse.com/security/cve/CVE-2026-2303/\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-39882/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41606/\nhttps://www.suse.com/security/cve/CVE-2026-42127/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-73501/\nhttps://www.suse.com/security/cve/CVE-2026-8609/\nhttps://www.suse.com/security/cve/CVE-2026-9029/\n","aliases":"CVE-2026-1229\nCVE-2026-14199\nCVE-2026-17033\nCVE-2026-17183\nCVE-2026-19197\nCVE-2026-19475\nCVE-2026-21723\nCVE-2026-2303\nCVE-2026-33814\nCVE-2026-39882\nCVE-2026-41178\nCVE-2026-41606\nCVE-2026-42127\nCVE-2026-56852\nCVE-2026-73501\nCVE-2026-8609\nCVE-2026-9029\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"01807b95-f6fe-3cba-b715-c2bd169a256a","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"13069db4-a1b2-3511-aafa-fadea995b78d","product":{"name":"grafana-0:12.4.10-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"20a384d8-83bd-30fc-8acd-aaaaec104ea3","product":{"name":"grafana-0:12.4.10-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2ecaadf6-7378-33f3-b32e-c6593624fc10","product":{"name":"grafana-0:12.4.10-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"58a5e7ce-b47e-3081-b0f3-5bdced72eb62","product":{"name":"grafana-0:12.4.10-bp160.1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}