Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-33377
Description
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
grafana/grafana
Docker HubThe official Grafana docker container
Docker HubThe official Grafana docker container>= 8.5.0, < 11.6.14, >= 12.2.0, < 12.2.8, >= 12.3.0, < 12.3.6, >= 12.4.0, < 12.4.3, = 11.6.14, = 12.2.8, = 12.3.6, = 12.4.3, = 13.0.0, = 13.0.1NVD
Grafana
ChocolateyGrafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
**Please Note**: This is an automatically updated package. If you find it is
out of date by more than a day or two, please contact the maintainer(s) and
let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.
ChocolateyGrafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
**Please Note**: This is an automatically updated package. If you find it is
out of date by more than a day or two, please contact the maintainer(s) and
let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.>= 8.5.0, < 11.6.14, >= 12.2.0, < 12.2.8, >= 12.3.0, < 12.3.6, >= 12.4.0, < 12.4.3, = 11.6.14, = 12.2.8, = 12.3.6, = 12.4.3, = 13.0.0, = 13.0.1NVD
RubyGems
NPM
Crates.io