[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-12459":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":548,"aliases":549,"duplicate_of":9,"upstream":553,"downstream":554,"duplicates":559,"related":560,"reserved_at":9,"published_at":561,"modified_at":562,"state":563,"summary":564,"references_raw":573,"kevs":648,"epss":649,"epss_history":652,"metrics":917,"affected":933},"CVE-2020-12459","In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-732","Incorrect Permission Assignment for Critical Resource","The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","weakness","Draft","Class","High",[20,68,222,256,298,320,333,337,498,502,506],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,53,58,63],{"id":45,"name":46,"tactic":47},"D3-SWI","Software Inventory",{"name":48},"Model",{"id":50,"name":51,"tactic":52},"D3-AVE","Asset Vulnerability Enumeration",{"name":48},{"id":54,"name":55,"tactic":56},"D3-SBV","Service Binary Verification",{"name":57},"Detect",{"id":59,"name":60,"tactic":61},"D3-SU","Software Update",{"name":62},"Harden",{"id":64,"name":65,"tactic":66},"D3-RS","Restore Software",{"name":67},"Restore",{"id":69,"name":70,"techniques":71},"CAPEC-122","Privilege Abuse",[72],{"id":73,"name":74,"tactics":75,"countermeasures":78},"T1548","Abuse Elevation Control Mechanism",[76,77],{"id":35,"name":36},{"id":32,"name":33},[79,83,87,91,95,99,103,107,111,115,119,123,127,131,136,140,145,149,153,157,161,165,169,173,177,181,186,190,194,198,202,206,210,214,218],{"id":80,"name":81,"tactic":82},"D3-CI","Configuration Inventory",{"name":48},{"id":84,"name":85,"tactic":86},"D3-AM","Access Modeling",{"name":48},{"id":88,"name":89,"tactic":90},"D3-DI","Data Inventory",{"name":48},{"id":92,"name":93,"tactic":94},"D3-NTPM","Network Traffic Policy Mapping",{"name":48},{"id":96,"name":97,"tactic":98},"D3-AEM","Application Exception Monitoring",{"name":57},{"id":100,"name":101,"tactic":102},"D3-SCA","System Call Analysis",{"name":57},{"id":104,"name":105,"tactic":106},"D3-SFA","System File Analysis",{"name":57},{"id":108,"name":109,"tactic":110},"D3-FA","File Analysis",{"name":57},{"id":112,"name":113,"tactic":114},"D3-FIM","File Integrity Monitoring",{"name":57},{"id":116,"name":117,"tactic":118},"D3-OPM","Operational Process Monitoring",{"name":57},{"id":120,"name":121,"tactic":122},"D3-DA","Dynamic Analysis",{"name":57},{"id":124,"name":125,"tactic":126},"D3-EFA","Emulated File Analysis",{"name":57},{"id":128,"name":129,"tactic":130},"D3-PSA","Process Spawn Analysis",{"name":57},{"id":132,"name":133,"tactic":134},"D3-FEV","File Eviction",{"name":135},"Evict",{"id":137,"name":138,"tactic":139},"D3-AL","Account Locking",{"name":135},{"id":141,"name":142,"tactic":143},"D3-DF","Decoy File",{"name":144},"Deceive",{"id":146,"name":147,"tactic":148},"D3-FE","File Encryption",{"name":62},{"id":150,"name":151,"tactic":152},"D3-AA","Agent Authentication",{"name":62},{"id":154,"name":155,"tactic":156},"D3-CDP","Change Default Password",{"name":62},{"id":158,"name":159,"tactic":160},"D3-SCP","System Configuration Permissions",{"name":62},{"id":162,"name":163,"tactic":164},"D3-RC","Restore Configuration",{"name":67},{"id":166,"name":167,"tactic":168},"D3-RF","Restore File",{"name":67},{"id":170,"name":171,"tactic":172},"D3-ULA","Unlock Account",{"name":67},{"id":174,"name":175,"tactic":176},"D3-RUAA","Restore User Account Access",{"name":67},{"id":178,"name":179,"tactic":180},"D3-RD","Restore Database",{"name":67},{"id":182,"name":183,"tactic":184},"D3-SCF","System Call Filtering",{"name":185},"Isolate",{"id":187,"name":188,"tactic":189},"D3-CF","Content Filtering",{"name":185},{"id":191,"name":192,"tactic":193},"D3-LFP","Local File Permissions",{"name":185},{"id":195,"name":196,"tactic":197},"D3-RFAM","Remote File Access Mediation",{"name":185},{"id":199,"name":200,"tactic":201},"D3-CQ","Content Quarantine",{"name":185},{"id":203,"name":204,"tactic":205},"D3-CM","Content Modification",{"name":185},{"id":207,"name":208,"tactic":209},"D3-UAP","User Account Permissions",{"name":185},{"id":211,"name":212,"tactic":213},"D3-EAL","Executable Allowlisting",{"name":185},{"id":215,"name":216,"tactic":217},"D3-EDL","Executable Denylisting",{"name":185},{"id":219,"name":220,"tactic":221},"D3-HBPI","Hardware-based Process Isolation",{"name":185},{"id":223,"name":224,"techniques":225},"CAPEC-127","Directory Indexing",[226],{"id":227,"name":228,"tactics":229,"countermeasures":233},"T1083","File and Directory Discovery",[230],{"id":231,"name":232},"TA0102","Discovery",[234,236,238,240,242,244,246,248,250,252,254],{"id":108,"name":109,"tactic":235},{"name":57},{"id":112,"name":113,"tactic":237},{"name":57},{"id":132,"name":133,"tactic":239},{"name":135},{"id":141,"name":142,"tactic":241},{"name":144},{"id":146,"name":147,"tactic":243},{"name":62},{"id":166,"name":167,"tactic":245},{"name":67},{"id":191,"name":192,"tactic":247},{"name":185},{"id":187,"name":188,"tactic":249},{"name":185},{"id":195,"name":196,"tactic":251},{"name":185},{"id":199,"name":200,"tactic":253},{"name":185},{"id":203,"name":204,"tactic":255},{"name":185},{"id":257,"name":258,"techniques":259},"CAPEC-17","Using Malicious Files",[260,280],{"id":261,"name":262,"tactics":263,"countermeasures":269},"T1574.005","Executable Installer File Permissions Weakness",[264,265,266,267,268],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[270,272,274,276,278],{"id":45,"name":46,"tactic":271},{"name":48},{"id":50,"name":51,"tactic":273},{"name":48},{"id":54,"name":55,"tactic":275},{"name":57},{"id":59,"name":60,"tactic":277},{"name":62},{"id":64,"name":65,"tactic":279},{"name":67},{"id":25,"name":26,"tactics":281,"countermeasures":287},[282,283,284,285,286],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[288,290,292,294,296],{"id":45,"name":46,"tactic":289},{"name":48},{"id":50,"name":51,"tactic":291},{"name":48},{"id":54,"name":55,"tactic":293},{"name":57},{"id":59,"name":60,"tactic":295},{"name":62},{"id":64,"name":65,"tactic":297},{"name":67},{"id":299,"name":300,"techniques":301},"CAPEC-180","Exploiting Incorrectly Configured Access Control Security Levels",[302],{"id":25,"name":26,"tactics":303,"countermeasures":309},[304,305,306,307,308],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[310,312,314,316,318],{"id":45,"name":46,"tactic":311},{"name":48},{"id":50,"name":51,"tactic":313},{"name":48},{"id":54,"name":55,"tactic":315},{"name":57},{"id":59,"name":60,"tactic":317},{"name":62},{"id":64,"name":65,"tactic":319},{"name":67},{"id":321,"name":322,"techniques":323},"CAPEC-206","Signing Malicious Code",[324],{"id":325,"name":326,"tactics":327,"countermeasures":332},"T1553.002","Code Signing",[328,329],{"id":35,"name":36},{"id":330,"name":331},"TA0112","Defense Impairment",[],{"id":334,"name":335,"techniques":336},"CAPEC-234","Hijacking a privileged process",[],{"id":338,"name":339,"techniques":340},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[341,393],{"id":342,"name":343,"tactics":344,"countermeasures":348},"T1134.001","Token Impersonation/Theft",[345,346,347],{"id":35,"name":36},{"id":38,"name":39},{"id":32,"name":33},[349,353,357,361,365,369,373,377,381,385,389],{"id":350,"name":351,"tactic":352},"D3-CCSA","Credential Compromise Scope Analysis",{"name":57},{"id":354,"name":355,"tactic":356},"D3-CR","Credential Revocation",{"name":135},{"id":358,"name":359,"tactic":360},"D3-ANCI","Authentication Cache Invalidation",{"name":135},{"id":362,"name":363,"tactic":364},"D3-DUC","Decoy User Credential",{"name":144},{"id":366,"name":367,"tactic":368},"D3-CH","Credential Hardening",{"name":62},{"id":370,"name":371,"tactic":372},"D3-MFA","Multi-factor Authentication",{"name":62},{"id":374,"name":375,"tactic":376},"D3-CRO","Credential Rotation",{"name":62},{"id":378,"name":379,"tactic":380},"D3-TB","Token Binding",{"name":62},{"id":382,"name":383,"tactic":384},"D3-TBA","Token-based Authentication",{"name":62},{"id":386,"name":387,"tactic":388},"D3-RIC","Reissue Credential",{"name":67},{"id":390,"name":391,"tactic":392},"D3-CTS","Credential Transmission Scoping",{"name":185},{"id":394,"name":395,"tactics":396,"countermeasures":401},"T1550.004","Web Session Cookie",[397,398],{"id":35,"name":36},{"id":399,"name":400},"TA0109","Lateral Movement",[402,406,410,414,418,422,426,430,434,438,442,444,446,450,454,458,462,464,466,468,470,472,474,476,480,484,486,488,492,496],{"id":403,"name":404,"tactic":405},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":57},{"id":407,"name":408,"tactic":409},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":57},{"id":411,"name":412,"tactic":413},"D3-CSPP","Client-server Payload Profiling",{"name":57},{"id":415,"name":416,"tactic":417},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":57},{"id":419,"name":420,"tactic":421},"D3-NTSA","Network Traffic Signature Analysis",{"name":57},{"id":423,"name":424,"tactic":425},"D3-APCA","Application Protocol Command Analysis",{"name":57},{"id":427,"name":428,"tactic":429},"D3-NTCD","Network Traffic Community Deviation",{"name":57},{"id":431,"name":432,"tactic":433},"D3-RTSD","Remote Terminal Session Detection",{"name":57},{"id":435,"name":436,"tactic":437},"D3-PLA","Process Lineage Analysis",{"name":57},{"id":439,"name":440,"tactic":441},"D3-PSMD","Process Self-Modification Detection",{"name":57},{"id":128,"name":129,"tactic":443},{"name":57},{"id":350,"name":351,"tactic":445},{"name":57},{"id":447,"name":448,"tactic":449},"D3-PT","Process Termination",{"name":135},{"id":451,"name":452,"tactic":453},"D3-PS","Process Suspension",{"name":135},{"id":455,"name":456,"tactic":457},"D3-HR","Host Reboot",{"name":135},{"id":459,"name":460,"tactic":461},"D3-HS","Host Shutdown",{"name":135},{"id":354,"name":355,"tactic":463},{"name":135},{"id":358,"name":359,"tactic":465},{"name":135},{"id":362,"name":363,"tactic":467},{"name":144},{"id":366,"name":367,"tactic":469},{"name":62},{"id":370,"name":371,"tactic":471},{"name":62},{"id":374,"name":375,"tactic":473},{"name":62},{"id":386,"name":387,"tactic":475},{"name":67},{"id":477,"name":478,"tactic":479},"D3-NTF","Network Traffic Filtering",{"name":185},{"id":481,"name":482,"tactic":483},"D3-KBPI","Kernel-based Process Isolation",{"name":185},{"id":182,"name":183,"tactic":485},{"name":185},{"id":219,"name":220,"tactic":487},{"name":185},{"id":489,"name":490,"tactic":491},"D3-ABPI","Application-based Process Isolation",{"name":185},{"id":493,"name":494,"tactic":495},"D3-WSAM","Web Session Access Mediation",{"name":185},{"id":390,"name":391,"tactic":497},{"name":185},{"id":499,"name":500,"techniques":501},"CAPEC-61","Session Fixation",[],{"id":503,"name":504,"techniques":505},"CAPEC-62","Cross Site Request Forgery",[],{"id":507,"name":508,"techniques":509},"CAPEC-642","Replace Binaries",[510,516,530],{"id":511,"name":512,"tactics":513,"countermeasures":515},"T1505.005","Terminal Services DLL",[514],{"id":29,"name":30},[],{"id":517,"name":518,"tactics":519,"countermeasures":521},"T1554","Compromise Host Software Binary",[520],{"id":29,"name":30},[522,524,526,528],{"id":45,"name":46,"tactic":523},{"name":48},{"id":50,"name":51,"tactic":525},{"name":48},{"id":59,"name":60,"tactic":527},{"name":62},{"id":64,"name":65,"tactic":529},{"name":67},{"id":261,"name":262,"tactics":531,"countermeasures":537},[532,533,534,535,536],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[538,540,542,544,546],{"id":45,"name":46,"tactic":539},{"name":48},{"id":50,"name":51,"tactic":541},{"name":48},{"id":54,"name":55,"tactic":543},{"name":57},{"id":59,"name":60,"tactic":545},{"name":62},{"id":64,"name":65,"tactic":547},{"name":67},[],[550,551,552],"GHSA-m25m-5778-fm22","BIT-grafana-2020-12459","GO-2024-2519",[],[555,557],{"_key":556},"RHSA-2020:4682",{"_key":558},"RHSA-2020:2362",[],[],"2020-04-29T15:56:56.000Z","2024-08-04T11:56:52.069Z","Modified",{"cisa_kev":565,"cisa_ransomware":565,"cisa_vendor":9,"epss_severity":566,"epss_score":567,"severity":568,"severity_score":569,"severity_version":570,"severity_source":571,"severity_vector":572,"severity_status":563},false,"low",0.00088,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",[574,584,590,595,600,605,609,613,618,623,627,632,636,640,644],{"url":575,"sources":576,"tags":579},"https://github.com/grafana/grafana/issues/8283",[577,571,578],"cve.org","osv_go",[580,581,582,583],"X Refsource MISC","Vendor Advisory","WEB","REPORT",{"url":585,"sources":586,"tags":587},"https://access.redhat.com/security/cve/CVE-2020-12459",[577,571,578],[588,589,582],"X Refsource CONFIRM","Third Party Advisory",{"url":591,"sources":592,"tags":593},"https://bugzilla.redhat.com/show_bug.cgi?id=1829724",[577,571,578],[588,594,589,582],"Issue Tracking",{"url":596,"sources":597,"tags":598},"https://src.fedoraproject.org/rpms/grafana/c/fab93d67363eb0a9678d9faf160cc88237f26277",[577,571,578],[588,599,589,582],"Patch",{"url":601,"sources":602,"tags":603},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTQCKJZZYXMCSHJFZZ3YXEO5NUBANGZS/",[577,571],[581,604],"X Refsource FEDORA",{"url":606,"sources":607,"tags":608},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEBCIEVSYIDDCA7FTRS2IFUOYLIQU34A/",[577,571],[581,604],{"url":610,"sources":611,"tags":612},"https://security.netapp.com/advisory/ntap-20200518-0004/",[577,571],[588,589],{"url":614,"sources":615,"tags":616},"https://nvd.nist.gov/vuln/detail/CVE-2020-12459",[578],[617],"Advisory",{"url":619,"sources":620,"tags":621},"https://github.com/grafana/grafana/commit/102448040d5132460e3b0013e03ebedec0677e00",[578],[582,622],"FIX",{"url":624,"sources":625,"tags":626},"https://bugzilla.redhat.com/show_bug.cgi?id=1827765",[578],[582],{"url":628,"sources":629,"tags":630},"https://github.com/grafana/grafana",[578],[631],"PACKAGE",{"url":633,"sources":634,"tags":635},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CTQCKJZZYXMCSHJFZZ3YXEO5NUBANGZS",[578],[582],{"url":637,"sources":638,"tags":639},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEBCIEVSYIDDCA7FTRS2IFUOYLIQU34A",[578],[582],{"url":641,"sources":642,"tags":643},"https://security.netapp.com/advisory/ntap-20200518-0004",[578],[582],{"url":645,"sources":646,"tags":647},"https://github.com/advisories/GHSA-m25m-5778-fm22",[578],[617],[],{"date":650,"score":567,"percentile":651},"2026-06-04",0.25135,[653,657,660,663,666,669,672,675,678,681,684,687,690,693,696,700,703,706,708,711,714,717,720,723,725,728,730,733,736,739,742,744,747,750,753,756,759,762,765,768,771,774,777,780,783,786,789,792,795,798,801,804,806,809,813,815,818,821,824,827,830,833,836,838,841,843,846,849,852,855,858,861,864,866,869,872,875,878,881,884,887,890,893,896,899,902,905,908,911,914],{"date":654,"score":655,"percentile":656},"2025-11-04",0.00037,0.10389,{"date":658,"score":655,"percentile":659},"2025-11-05",0.10418,{"date":661,"score":655,"percentile":662},"2025-11-06",0.1053,{"date":664,"score":655,"percentile":665},"2025-11-07",0.10553,{"date":667,"score":655,"percentile":668},"2025-11-08",0.10557,{"date":670,"score":655,"percentile":671},"2025-11-09",0.10519,{"date":673,"score":655,"percentile":674},"2025-11-10",0.10482,{"date":676,"score":655,"percentile":677},"2025-11-11",0.10494,{"date":679,"score":655,"percentile":680},"2025-11-12",0.10525,{"date":682,"score":655,"percentile":683},"2025-11-13",0.10563,{"date":685,"score":655,"percentile":686},"2025-11-14",0.1057,{"date":688,"score":655,"percentile":689},"2025-11-15",0.10567,{"date":691,"score":655,"percentile":692},"2025-11-16",0.10566,{"date":694,"score":655,"percentile":695},"2025-11-17",0.10547,{"date":697,"score":698,"percentile":699},"2025-11-18",0.00065,0.16075,{"date":701,"score":698,"percentile":702},"2025-11-19",0.16086,{"date":704,"score":698,"percentile":705},"2025-11-20",0.16071,{"date":707,"score":655,"percentile":686},"2025-11-21",{"date":709,"score":655,"percentile":710},"2025-11-22",0.10575,{"date":712,"score":655,"percentile":713},"2025-11-23",0.1054,{"date":715,"score":655,"percentile":716},"2025-11-24",0.10504,{"date":718,"score":655,"percentile":719},"2025-11-25",0.10508,{"date":721,"score":655,"percentile":722},"2025-11-26",0.10502,{"date":724,"score":655,"percentile":719},"2025-11-27",{"date":726,"score":655,"percentile":727},"2025-11-28",0.10497,{"date":729,"score":655,"percentile":727},"2025-11-29",{"date":731,"score":567,"percentile":732},"2025-11-30",0.25553,{"date":734,"score":567,"percentile":735},"2025-12-01",0.25587,{"date":737,"score":567,"percentile":738},"2025-12-02",0.25613,{"date":740,"score":567,"percentile":741},"2025-12-03",0.25623,{"date":743,"score":567,"percentile":732},"2025-12-04",{"date":745,"score":567,"percentile":746},"2025-12-05",0.25608,{"date":748,"score":567,"percentile":749},"2025-12-06",0.25614,{"date":751,"score":567,"percentile":752},"2025-12-07",0.2558,{"date":754,"score":567,"percentile":755},"2025-12-08",0.25581,{"date":757,"score":567,"percentile":758},"2025-12-09",0.25628,{"date":760,"score":567,"percentile":761},"2025-12-10",0.25694,{"date":763,"score":567,"percentile":764},"2025-12-11",0.25711,{"date":766,"score":567,"percentile":767},"2025-12-12",0.25724,{"date":769,"score":567,"percentile":770},"2025-12-13",0.2573,{"date":772,"score":567,"percentile":773},"2025-12-14",0.25703,{"date":775,"score":567,"percentile":776},"2025-12-15",0.25674,{"date":778,"score":567,"percentile":779},"2025-12-16",0.25684,{"date":781,"score":567,"percentile":782},"2025-12-17",0.25758,{"date":784,"score":567,"percentile":785},"2025-12-18",0.25817,{"date":787,"score":567,"percentile":788},"2025-12-19",0.25832,{"date":790,"score":567,"percentile":791},"2025-12-20",0.25799,{"date":793,"score":567,"percentile":794},"2025-12-21",0.25746,{"date":796,"score":567,"percentile":797},"2025-12-22",0.25706,{"date":799,"score":567,"percentile":800},"2025-12-23",0.25673,{"date":802,"score":567,"percentile":803},"2025-12-24",0.25686,{"date":805,"score":567,"percentile":782},"2025-12-25",{"date":807,"score":567,"percentile":808},"2025-12-26",0.25748,{"date":810,"score":811,"percentile":812},"2025-12-27",0.00098,0.2763,{"date":814,"score":567,"percentile":741},"2025-12-28",{"date":816,"score":567,"percentile":817},"2025-12-29",0.25597,{"date":819,"score":567,"percentile":820},"2025-12-30",0.25595,{"date":822,"score":567,"percentile":823},"2025-12-31",0.25655,{"date":825,"score":567,"percentile":826},"2026-01-01",0.25754,{"date":828,"score":567,"percentile":829},"2026-01-02",0.25749,{"date":831,"score":567,"percentile":832},"2026-01-03",0.25736,{"date":834,"score":567,"percentile":835},"2026-01-04",0.2564,{"date":837,"score":567,"percentile":741},"2026-01-05",{"date":839,"score":567,"percentile":840},"2026-01-06",0.25631,{"date":842,"score":567,"percentile":823},"2026-01-07",{"date":844,"score":567,"percentile":845},"2026-01-08",0.25702,{"date":847,"score":567,"percentile":848},"2026-01-09",0.25682,{"date":850,"score":567,"percentile":851},"2026-01-10",0.25657,{"date":853,"score":567,"percentile":854},"2026-01-11",0.25638,{"date":856,"score":567,"percentile":857},"2026-01-12",0.25594,{"date":859,"score":567,"percentile":860},"2026-01-13",0.25573,{"date":862,"score":567,"percentile":863},"2026-01-14",0.25622,{"date":865,"score":567,"percentile":738},"2026-01-15",{"date":867,"score":567,"percentile":868},"2026-01-16",0.25643,{"date":870,"score":567,"percentile":871},"2026-01-17",0.25647,{"date":873,"score":567,"percentile":874},"2026-01-18",0.25598,{"date":876,"score":567,"percentile":877},"2026-01-19",0.2555,{"date":879,"score":567,"percentile":880},"2026-01-20",0.2553,{"date":882,"score":567,"percentile":883},"2026-01-21",0.25475,{"date":885,"score":567,"percentile":886},"2026-01-22",0.25453,{"date":888,"score":567,"percentile":889},"2026-01-23",0.25532,{"date":891,"score":567,"percentile":892},"2026-01-24",0.25537,{"date":894,"score":567,"percentile":895},"2026-01-25",0.25452,{"date":897,"score":567,"percentile":898},"2026-01-26",0.2536,{"date":900,"score":567,"percentile":901},"2026-01-27",0.25345,{"date":903,"score":567,"percentile":904},"2026-01-28",0.25342,{"date":906,"score":567,"percentile":907},"2026-01-29",0.25304,{"date":909,"score":567,"percentile":910},"2026-01-30",0.25293,{"date":912,"score":567,"percentile":913},"2026-01-31",0.25288,{"date":915,"score":567,"percentile":916},"2026-02-01",0.2534,[918,928],{"source":571,"cvss_v2_0":919,"cvss_v3_0":9,"cvss_v3_1":924,"cvss_v4_0":9},{"baseScore":920,"baseSeverity":9,"vectorString":921,"impactScore":922,"exploitabilityScore":923},2.1,"AV:L/AC:L/Au:N/C:P/I:N/A:N",2.9,3.9,{"baseScore":569,"baseSeverity":925,"vectorString":572,"impactScore":926,"exploitabilityScore":927},"MEDIUM",6,4.6,{"source":578,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":929,"cvss_v4_0":930},{"baseScore":569,"baseSeverity":9,"vectorString":572,"impactScore":926,"exploitabilityScore":927},{"baseScore":931,"baseSeverity":9,"vectorString":932,"impactScore":9,"exploitabilityScore":9},7.1,"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",[934,944,961],{"ecosystem":9,"name":935,"vendor":936,"product":935,"cpe_part":937,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":938},"fedora","fedoraproject","o",[939,942],{"version":940,"is_range":565,"range_type":941,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31","cpe",{"version":943,"is_range":565,"range_type":941,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"32",{"ecosystem":945,"name":946,"vendor":947,"product":948,"cpe_part":9,"purl_type":949,"purl_namespace":947,"purl_name":948,"source":9,"versions":950},"Go","github.com/grafana/grafana","github.com/grafana","grafana","golang",[951,955],{"version":952,"is_range":953,"range_type":954,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"semver",{"version":956,"is_range":953,"range_type":954,"version_start":957,"version_start_type":958,"version_end":959,"version_end_type":960,"fixed_in":9},"gte6_0_0_beta1_lt7_2_1","6.0.0-beta1","including","7.2.1","excluding",{"ecosystem":9,"name":948,"vendor":948,"product":948,"cpe_part":962,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":963},"a",[964],{"version":965,"is_range":953,"range_type":941,"version_start":966,"version_start_type":958,"version_end":967,"version_end_type":958,"fixed_in":9},"gte6.0.0_lte6.3.6","6.0.0","6.3.6"]