[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-8609":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":88,"downstream":89,"duplicates":102,"related":103,"reserved_at":9,"published_at":105,"modified_at":106,"state":107,"summary":108,"references_raw":117,"kevs":124,"epss":125,"epss_history":128,"metrics":340,"affected":352},"CVE-2026-8609","An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,66,70,74,78],{"id":37,"name":38,"tactic":39},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":50,"name":51,"tactic":52},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":54,"name":55,"tactic":56},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":58,"name":59,"tactic":60},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTF","Network Traffic Filtering",{"name":65},"Isolate",{"id":67,"name":68,"tactic":69},"D3-ITF","Inbound Traffic Filtering",{"name":65},{"id":71,"name":72,"tactic":73},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},{"id":75,"name":76,"tactic":77},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":79,"name":80,"tactic":81},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[],[],[90,92,94,96,98,100],{"_key":91},"OPENSUSE-SU-2026:11619-1",{"_key":93},"RHSA-2026:65157",{"_key":95},"RHSA-2026:54178",{"_key":97},"RHSA-2026:63164",{"_key":99},"CVE-2026-84375",{"_key":101},"RHSA-2026:67517",[],[104],{"_key":91},"2026-07-10T14:58:33.522Z","2026-08-27T17:22:37.575Z","Analyzed",{"cisa_kev":109,"cisa_ransomware":109,"cisa_vendor":9,"epss_severity":110,"epss_score":111,"severity":112,"severity_score":113,"severity_version":114,"severity_source":115,"severity_vector":116,"severity_status":107},false,"low",0.00397,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[118],{"url":119,"sources":120,"tags":122},"https://grafana.com/security/security-advisories/cve-2026-8609",[121,115],"cve.org",[123],"Vendor Advisory",[],{"date":126,"score":111,"percentile":127},"2026-09-19",0.33771,[129,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339],{"date":130,"score":131,"percentile":132},"2026-07-11",0.00359,0.2801,{"date":134,"score":131,"percentile":135},"2026-07-12",0.27994,{"date":137,"score":131,"percentile":138},"2026-07-13",0.28011,{"date":140,"score":111,"percentile":141},"2026-07-14",0.31869,{"date":143,"score":111,"percentile":144},"2026-07-15",0.31943,{"date":146,"score":111,"percentile":147},"2026-07-16",0.31977,{"date":149,"score":111,"percentile":150},"2026-07-17",0.31994,{"date":152,"score":111,"percentile":153},"2026-07-18",0.32002,{"date":155,"score":111,"percentile":156},"2026-07-19",0.31999,{"date":158,"score":111,"percentile":159},"2026-07-20",0.32077,{"date":161,"score":111,"percentile":162},"2026-07-21",0.32084,{"date":164,"score":111,"percentile":165},"2026-07-22",0.3225,{"date":167,"score":111,"percentile":168},"2026-07-23",0.32251,{"date":170,"score":111,"percentile":171},"2026-07-24",0.3233,{"date":173,"score":111,"percentile":174},"2026-07-25",0.32406,{"date":176,"score":111,"percentile":177},"2026-07-26",0.32399,{"date":179,"score":111,"percentile":180},"2026-07-27",0.32379,{"date":182,"score":111,"percentile":183},"2026-07-28",0.32436,{"date":185,"score":111,"percentile":186},"2026-07-29",0.32453,{"date":188,"score":111,"percentile":189},"2026-07-30",0.32519,{"date":191,"score":111,"percentile":192},"2026-07-31",0.32541,{"date":194,"score":111,"percentile":192},"2026-08-01",{"date":196,"score":111,"percentile":197},"2026-08-02",0.3254,{"date":199,"score":111,"percentile":200},"2026-08-03",0.3255,{"date":202,"score":111,"percentile":203},"2026-08-04",0.32526,{"date":205,"score":111,"percentile":206},"2026-08-05",0.32498,{"date":208,"score":111,"percentile":209},"2026-08-06",0.32529,{"date":211,"score":111,"percentile":212},"2026-08-07",0.32567,{"date":214,"score":111,"percentile":215},"2026-08-08",0.32568,{"date":217,"score":111,"percentile":218},"2026-08-09",0.32551,{"date":220,"score":111,"percentile":221},"2026-08-10",0.32561,{"date":223,"score":111,"percentile":224},"2026-08-11",0.32658,{"date":226,"score":111,"percentile":227},"2026-08-12",0.32745,{"date":229,"score":111,"percentile":230},"2026-08-13",0.32777,{"date":232,"score":111,"percentile":233},"2026-08-14",0.32831,{"date":235,"score":111,"percentile":236},"2026-08-15",0.32961,{"date":238,"score":111,"percentile":239},"2026-08-16",0.32985,{"date":241,"score":111,"percentile":242},"2026-08-17",0.32914,{"date":244,"score":111,"percentile":245},"2026-08-18",0.32933,{"date":247,"score":111,"percentile":248},"2026-08-19",0.33106,{"date":250,"score":111,"percentile":251},"2026-08-20",0.33168,{"date":253,"score":111,"percentile":254},"2026-08-21",0.33206,{"date":256,"score":111,"percentile":257},"2026-08-22",0.33219,{"date":259,"score":111,"percentile":260},"2026-08-23",0.33161,{"date":262,"score":111,"percentile":263},"2026-08-24",0.32575,{"date":265,"score":111,"percentile":266},"2026-08-25",0.32601,{"date":268,"score":111,"percentile":269},"2026-08-26",0.32687,{"date":271,"score":111,"percentile":272},"2026-08-27",0.32717,{"date":274,"score":111,"percentile":275},"2026-08-28",0.32704,{"date":277,"score":111,"percentile":278},"2026-08-29",0.32735,{"date":280,"score":111,"percentile":281},"2026-08-30",0.32803,{"date":283,"score":111,"percentile":284},"2026-08-31",0.32812,{"date":286,"score":111,"percentile":287},"2026-09-01",0.32842,{"date":289,"score":111,"percentile":290},"2026-09-02",0.32889,{"date":292,"score":111,"percentile":293},"2026-09-03",0.32913,{"date":295,"score":111,"percentile":296},"2026-09-04",0.32948,{"date":298,"score":111,"percentile":299},"2026-09-05",0.32942,{"date":301,"score":111,"percentile":302},"2026-09-06",0.33013,{"date":304,"score":111,"percentile":305},"2026-09-07",0.33018,{"date":307,"score":111,"percentile":308},"2026-09-08",0.33032,{"date":310,"score":111,"percentile":311},"2026-09-09",0.33187,{"date":313,"score":111,"percentile":314},"2026-09-10",0.33205,{"date":316,"score":111,"percentile":317},"2026-09-11",0.33229,{"date":319,"score":111,"percentile":320},"2026-09-12",0.33325,{"date":322,"score":111,"percentile":323},"2026-09-13",0.33281,{"date":325,"score":111,"percentile":326},"2026-09-14",0.33304,{"date":328,"score":111,"percentile":329},"2026-09-15",0.33376,{"date":331,"score":111,"percentile":332},"2026-09-16",0.33536,{"date":334,"score":111,"percentile":335},"2026-09-17",0.33608,{"date":337,"score":111,"percentile":338},"2026-09-18",0.33754,{"date":126,"score":111,"percentile":127},[341,348],{"source":121,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":342,"cvss_v4_0":9},{"baseScore":343,"baseSeverity":344,"vectorString":345,"impactScore":346,"exploitabilityScore":347},5.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",2.3,10,{"source":115,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":349,"cvss_v4_0":9},{"baseScore":113,"baseSeverity":350,"vectorString":116,"impactScore":351,"exploitabilityScore":347},"HIGH",6,[353,381],{"ecosystem":9,"name":354,"vendor":354,"product":354,"cpe_part":355,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":356},"grafana","a",[357,365,369,373,377],{"version":358,"is_range":359,"range_type":360,"version_start":361,"version_start_type":362,"version_end":363,"version_end_type":364,"fixed_in":9},"gte11.6.0_lt11.6.15",true,"cpe","11.6.0","including","11.6.15","excluding",{"version":366,"is_range":359,"range_type":360,"version_start":367,"version_start_type":362,"version_end":368,"version_end_type":364,"fixed_in":9},"gte12.2.0_lt12.2.9","12.2.0","12.2.9",{"version":370,"is_range":359,"range_type":360,"version_start":371,"version_start_type":362,"version_end":372,"version_end_type":364,"fixed_in":9},"gte12.3.0_lt12.3.7","12.3.0","12.3.7",{"version":374,"is_range":359,"range_type":360,"version_start":375,"version_start_type":362,"version_end":376,"version_end_type":364,"fixed_in":9},"gte12.4.0_lt12.4.4","12.4.0","12.4.4",{"version":378,"is_range":359,"range_type":360,"version_start":379,"version_start_type":362,"version_end":380,"version_end_type":364,"fixed_in":9},"gte13.0.0_lt13.0.2","13.0.0","13.0.2",{"ecosystem":9,"name":382,"vendor":354,"product":383,"cpe_part":355,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":384},"Grafana OSS","grafana oss",[385,388,391,394,397],{"version":386,"is_range":359,"range_type":121,"version_start":361,"version_start_type":362,"version_end":387,"version_end_type":362,"fixed_in":9},">= 11.6.0, \u003C= 11.6.14","11.6.14",{"version":389,"is_range":359,"range_type":121,"version_start":367,"version_start_type":362,"version_end":390,"version_end_type":362,"fixed_in":9},">= 12.2.0, \u003C= 12.2.8","12.2.8",{"version":392,"is_range":359,"range_type":121,"version_start":371,"version_start_type":362,"version_end":393,"version_end_type":362,"fixed_in":9},">= 12.3.0, \u003C= 12.3.6","12.3.6",{"version":395,"is_range":359,"range_type":121,"version_start":375,"version_start_type":362,"version_end":396,"version_end_type":362,"fixed_in":9},">= 12.4.0, \u003C= 12.4.3","12.4.3",{"version":398,"is_range":359,"range_type":121,"version_start":379,"version_start_type":362,"version_end":399,"version_end_type":362,"fixed_in":9},">= 13.0.0, \u003C= 13.0.1","13.0.1"]