https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:21:37 +0000 https://vulnerability.circl.lu/vuln/cve-2025-41117 <p><strong>Affected:</strong> grafana/grafana, grafana/grafana-enterprise</p> <p>Stack traces in Grafana&#39;s Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field.</p> <p>Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo do not appear affected whatsoever.</p> <p><strong>Affected:</strong> grafana/grafana, grafana/grafana-enterprise</p> <p>Stack traces in Grafana&#39;s Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field.</p> <p>Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo do not appear affected whatsoever.</p> https://vulnerability.circl.lu/vuln/cve-2025-41117