Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
grafana-alloy could let attackers bypass controls
published 1 month ago
Summary
The grafana-alloy component in version 1.16.3‑r0 has a weakness that could let a malicious user gain access they shouldn’t have. The problem is fixed in newer releases, so updating grafana-alloy to the latest version is the recommended action.
What to do
- Update cleanstart grafana-alloy to version 1.16.3-r0.
- Update grafana-alloy to version 1.16.3-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | grafana-alloy |
< 1.16.3-r0 Fix: upgrade to 1.16.3-r0
|
| CleanStart | – | grafana-alloy |
< 1.16.3-r0 Fix: upgrade to 1.16.3-r0
|
Original advisory text
Security fix for GHSA-259r-337f-4rfw applied in: grafana-alloy 1.16.3-r0
Security vulnerability affects the grafana-alloy package. This issue is resolved in later releases. See references for vulnerability details.
Timeline
Published29 Sep 2026
Updated15 Oct 2026
First seen30 Sep 2026
Sources
CLEANSTART-2026-WM90638 · OSV
Track software like this
Free during beta