https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:35:36 +0000 https://vulnerability.circl.lu/vuln/bit-grafana-2026-14199 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user&#39;s, while that user&#39;s cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user&#39;s, while that user&#39;s cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).</p> https://vulnerability.circl.lu/vuln/bit-grafana-2026-14199 https://vulnerability.circl.lu/vuln/fkie_cve-2026-14199 <p>Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user&#39;s, while that user&#39;s cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).</p> <p>Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user&#39;s, while that user&#39;s cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-14199 https://vulnerability.circl.lu/vuln/ghsa-9758-8g25-vw94 <p>Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user&#39;s, while that user&#39;s cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).</p> <p>Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user&#39;s, while that user&#39;s cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).</p> https://vulnerability.circl.lu/vuln/ghsa-9758-8g25-vw94 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11684-1 <p>grafana-12.4.10-1.1 on GA media</p> <p>grafana-12.4.10-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11684-1 https://vulnerability.circl.lu/vuln/rhsa-2026:66008 <p>grafana: Grafana: Session takeover via Auth Proxy cache key collision undici: undici: Denial of Service due to orphaned response body in retry handler undici: undici: HTTP response splitting via retry interceptor undici: undici: Denial of Service via unrequested WebSocket subprotocol grafana: Grafana: Unauthorized public dashboard deletion across organizations undici: undici: Denial of Service via unbounded decompression of compressed responses undici: undici: Cross-user cookie disclosure via Set-Cookie caching undici: Undici: Response truncation and connection termination undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options undici: undici: Integrity failure due to caching of unsafe HTTP method responses undici: undici: Denial of Service via WebSocketStream unclean close</p> <p>grafana: Grafana: Session takeover via Auth Proxy cache key collision undici: undici: Denial of Service due to orphaned response body in retry handler undici: undici: HTTP response splitting via retry interceptor undici: undici: Denial of Service via unrequested WebSocket subprotocol grafana: Grafana: Unauthorized public dashboard deletion across organizations undici: undici: Denial of Service via unbounded decompression of compressed responses undici: undici: Cross-user cookie disclosure via Set-Cookie caching undici: Undici: Response truncation and connection termination undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options undici: undici: Integrity failure due to caching of unsafe HTTP method responses undici: undici: Denial of Service via WebSocketStream unclean close</p> https://vulnerability.circl.lu/vuln/rhsa-2026:66008