[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-33382":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":88,"downstream":89,"duplicates":110,"related":111,"reserved_at":9,"published_at":117,"modified_at":118,"state":119,"summary":120,"references_raw":129,"kevs":136,"epss":137,"epss_history":140,"metrics":352,"affected":360},"CVE-2026-33382","Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,66,70,74,78],{"id":37,"name":38,"tactic":39},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":50,"name":51,"tactic":52},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":54,"name":55,"tactic":56},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":58,"name":59,"tactic":60},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTF","Network Traffic Filtering",{"name":65},"Isolate",{"id":67,"name":68,"tactic":69},"D3-ITF","Inbound Traffic Filtering",{"name":65},{"id":71,"name":72,"tactic":73},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},{"id":75,"name":76,"tactic":77},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":79,"name":80,"tactic":81},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[],[],[90,92,94,96,98,100,102,104,106,108],{"_key":91},"OPENSUSE-SU-2026:11277-1",{"_key":93},"OPENSUSE-SU-2026:21366-1",{"_key":95},"SUSE-SU-2026:3713-1",{"_key":97},"SUSE-SU-2026:3714-1",{"_key":99},"SUSE-SU-2026:3718-1",{"_key":101},"RHSA-2026:65157",{"_key":103},"RHSA-2026:54178",{"_key":105},"RHSA-2026:63164",{"_key":107},"CVE-2026-84375",{"_key":109},"RHSA-2026:67517",[],[112,113,114,115,116],{"_key":91},{"_key":93},{"_key":95},{"_key":97},{"_key":99},"2026-07-10T14:58:23.329Z","2026-08-27T17:22:28.355Z","Analyzed",{"cisa_kev":121,"cisa_ransomware":121,"cisa_vendor":9,"epss_severity":122,"epss_score":123,"severity":124,"severity_score":125,"severity_version":126,"severity_source":127,"severity_vector":128,"severity_status":119},false,"low",0.00388,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[130],{"url":131,"sources":132,"tags":134},"https://grafana.com/security/security-advisories/cve-2026-33382",[127,133],"nvd",[135],"Vendor Advisory",[],{"date":138,"score":123,"percentile":139},"2026-09-19",0.32768,[141,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351],{"date":142,"score":143,"percentile":144},"2026-07-11",0.0038,0.30107,{"date":146,"score":143,"percentile":147},"2026-07-12",0.30098,{"date":149,"score":143,"percentile":150},"2026-07-13",0.30109,{"date":152,"score":143,"percentile":153},"2026-07-14",0.30121,{"date":155,"score":143,"percentile":156},"2026-07-15",0.30194,{"date":158,"score":143,"percentile":159},"2026-07-16",0.30232,{"date":161,"score":143,"percentile":162},"2026-07-17",0.30262,{"date":164,"score":143,"percentile":165},"2026-07-18",0.30272,{"date":167,"score":143,"percentile":168},"2026-07-19",0.30273,{"date":170,"score":143,"percentile":171},"2026-07-20",0.30353,{"date":173,"score":143,"percentile":174},"2026-07-21",0.30363,{"date":176,"score":143,"percentile":177},"2026-07-22",0.30526,{"date":179,"score":143,"percentile":180},"2026-07-23",0.30524,{"date":182,"score":123,"percentile":183},"2026-07-24",0.31384,{"date":185,"score":123,"percentile":186},"2026-07-25",0.31455,{"date":188,"score":123,"percentile":189},"2026-07-26",0.31445,{"date":191,"score":123,"percentile":192},"2026-07-27",0.31423,{"date":194,"score":123,"percentile":195},"2026-07-28",0.31476,{"date":197,"score":123,"percentile":198},"2026-07-29",0.31493,{"date":200,"score":123,"percentile":201},"2026-07-30",0.31557,{"date":203,"score":123,"percentile":204},"2026-07-31",0.31579,{"date":206,"score":123,"percentile":207},"2026-08-01",0.31581,{"date":209,"score":123,"percentile":207},"2026-08-02",{"date":211,"score":123,"percentile":212},"2026-08-03",0.3159,{"date":214,"score":123,"percentile":215},"2026-08-04",0.31562,{"date":217,"score":123,"percentile":218},"2026-08-05",0.31534,{"date":220,"score":123,"percentile":221},"2026-08-06",0.31566,{"date":223,"score":123,"percentile":224},"2026-08-07",0.31602,{"date":226,"score":123,"percentile":227},"2026-08-08",0.31608,{"date":229,"score":123,"percentile":230},"2026-08-09",0.31594,{"date":232,"score":123,"percentile":233},"2026-08-10",0.31605,{"date":235,"score":123,"percentile":236},"2026-08-11",0.317,{"date":238,"score":123,"percentile":239},"2026-08-12",0.31786,{"date":241,"score":123,"percentile":242},"2026-08-13",0.31822,{"date":244,"score":123,"percentile":245},"2026-08-14",0.31877,{"date":247,"score":123,"percentile":248},"2026-08-15",0.3201,{"date":250,"score":123,"percentile":251},"2026-08-16",0.32033,{"date":253,"score":123,"percentile":254},"2026-08-17",0.31951,{"date":256,"score":123,"percentile":257},"2026-08-18",0.3197,{"date":259,"score":123,"percentile":260},"2026-08-19",0.32139,{"date":262,"score":123,"percentile":263},"2026-08-20",0.32206,{"date":265,"score":123,"percentile":266},"2026-08-21",0.32245,{"date":268,"score":123,"percentile":269},"2026-08-22",0.32261,{"date":271,"score":123,"percentile":272},"2026-08-23",0.32163,{"date":274,"score":123,"percentile":275},"2026-08-24",0.31597,{"date":277,"score":123,"percentile":278},"2026-08-25",0.31621,{"date":280,"score":123,"percentile":281},"2026-08-26",0.31701,{"date":283,"score":123,"percentile":284},"2026-08-27",0.31732,{"date":286,"score":123,"percentile":287},"2026-08-28",0.31687,{"date":289,"score":123,"percentile":290},"2026-08-29",0.3172,{"date":292,"score":123,"percentile":293},"2026-08-30",0.31828,{"date":295,"score":123,"percentile":296},"2026-08-31",0.31826,{"date":298,"score":123,"percentile":299},"2026-09-01",0.31853,{"date":301,"score":123,"percentile":302},"2026-09-02",0.31904,{"date":304,"score":123,"percentile":305},"2026-09-03",0.31928,{"date":307,"score":123,"percentile":308},"2026-09-04",0.31965,{"date":310,"score":123,"percentile":311},"2026-09-05",0.3192,{"date":313,"score":123,"percentile":314},"2026-09-06",0.32027,{"date":316,"score":123,"percentile":317},"2026-09-07",0.32034,{"date":319,"score":123,"percentile":320},"2026-09-08",0.3205,{"date":322,"score":123,"percentile":323},"2026-09-09",0.32202,{"date":325,"score":123,"percentile":326},"2026-09-10",0.32217,{"date":328,"score":123,"percentile":329},"2026-09-11",0.32239,{"date":331,"score":123,"percentile":332},"2026-09-12",0.32339,{"date":334,"score":123,"percentile":335},"2026-09-13",0.32298,{"date":337,"score":123,"percentile":338},"2026-09-14",0.3232,{"date":340,"score":123,"percentile":341},"2026-09-15",0.3239,{"date":343,"score":123,"percentile":344},"2026-09-16",0.32546,{"date":346,"score":123,"percentile":347},"2026-09-17",0.32608,{"date":349,"score":123,"percentile":350},"2026-09-18",0.32748,{"date":138,"score":123,"percentile":139},[353,358],{"source":127,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":354,"cvss_v4_0":9},{"baseScore":125,"baseSeverity":355,"vectorString":128,"impactScore":356,"exploitabilityScore":357},"HIGH",6,10,{"source":133,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":359,"cvss_v4_0":9},{"baseScore":125,"baseSeverity":355,"vectorString":128,"impactScore":356,"exploitabilityScore":357},[361,389],{"ecosystem":9,"name":362,"vendor":362,"product":362,"cpe_part":363,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":364},"grafana","a",[365,373,377,381,385],{"version":366,"is_range":367,"range_type":368,"version_start":369,"version_start_type":370,"version_end":371,"version_end_type":372,"fixed_in":9},"gte11.6.0_lt11.6.15",true,"cpe","11.6.0","including","11.6.15","excluding",{"version":374,"is_range":367,"range_type":368,"version_start":375,"version_start_type":370,"version_end":376,"version_end_type":372,"fixed_in":9},"gte12.2.0_lt12.2.9","12.2.0","12.2.9",{"version":378,"is_range":367,"range_type":368,"version_start":379,"version_start_type":370,"version_end":380,"version_end_type":372,"fixed_in":9},"gte12.3.0_lt12.3.7","12.3.0","12.3.7",{"version":382,"is_range":367,"range_type":368,"version_start":383,"version_start_type":370,"version_end":384,"version_end_type":372,"fixed_in":9},"gte12.4.0_lt12.4.4","12.4.0","12.4.4",{"version":386,"is_range":367,"range_type":368,"version_start":387,"version_start_type":370,"version_end":388,"version_end_type":372,"fixed_in":9},"gte13.0.0_lt13.0.2","13.0.0","13.0.2",{"ecosystem":9,"name":390,"vendor":362,"product":391,"cpe_part":363,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":392},"Grafana OSS","grafana oss",[393,396,399,402,405],{"version":394,"is_range":367,"range_type":127,"version_start":369,"version_start_type":370,"version_end":395,"version_end_type":370,"fixed_in":9},">= 11.6.0, \u003C= 11.6.14","11.6.14",{"version":397,"is_range":367,"range_type":127,"version_start":375,"version_start_type":370,"version_end":398,"version_end_type":370,"fixed_in":9},">= 12.2.0, \u003C= 12.2.8","12.2.8",{"version":400,"is_range":367,"range_type":127,"version_start":379,"version_start_type":370,"version_end":401,"version_end_type":370,"fixed_in":9},">= 12.3.0, \u003C= 12.3.6","12.3.6",{"version":403,"is_range":367,"range_type":127,"version_start":383,"version_start_type":370,"version_end":404,"version_end_type":370,"fixed_in":9},">= 12.4.0, \u003C= 12.4.3","12.4.3",{"version":406,"is_range":367,"range_type":127,"version_start":387,"version_start_type":370,"version_end":407,"version_end_type":370,"fixed_in":9},">= 13.0.0, \u003C= 13.0.1","13.0.1"]