Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Grafana could allow unauthorized access to data

published 4 days ago
Summary

The Grafana software version 13.0.3-r3 contains a security weakness that could let an attacker view or change information they shouldn't. The problem has been fixed in newer versions, so updating Grafana to the latest release is recommended.

What to do
  • Update cleanstart grafana to version 13.0.3-r3.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart grafana < 13.0.3-r3
Fix: upgrade to 13.0.3-r3
Original advisory text
Security fix for GHSA-jpcw-4wr7-c3vq applied in: grafana 13.0.3-r3
Security vulnerability affects the grafana package. This issue is resolved in later releases. See references for vulnerability details.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-MF31938 · OSV
Track software like this
Free during beta