[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-9029":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":45,"duplicate_of":9,"upstream":46,"downstream":47,"duplicates":52,"related":53,"reserved_at":9,"published_at":55,"modified_at":56,"state":57,"summary":58,"references_raw":67,"kevs":75,"epss":76,"epss_history":79,"metrics":341,"affected":353},"CVE-2026-9029","A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard (stored cross-site scripting).",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[],[],[],[48,50],{"_key":49},"UBUNTU-CVE-2026-9029",{"_key":51},"OPENSUSE-SU-2026:11619-1",[],[54],{"_key":51},"2026-06-22T13:18:40.770Z","2026-08-27T17:22:27.685Z","Modified",{"cisa_kev":59,"cisa_ransomware":59,"cisa_vendor":9,"epss_severity":60,"epss_score":61,"severity":62,"severity_score":63,"severity_version":64,"severity_source":65,"severity_vector":66,"severity_status":57},false,"low",0.00251,"high",7.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",[68],{"url":69,"sources":70,"tags":72},"https://grafana.com/security/security-advisories/cve-2026-9029",[65,71],"nvd",[73,74],"Vendor Advisory","Broken Link",[],{"date":77,"score":61,"percentile":78},"2026-09-19",0.16812,[80,84,87,90,93,96,99,102,105,109,112,115,118,121,124,127,130,133,136,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,199,202,205,207,210,213,216,219,222,224,226,229,232,235,238,241,244,247,250,253,255,258,261,264,267,270,273,276,279,282,284,287,290,293,296,299,302,305,307,310,313,316,319,322,325,328,331,334,337,340],{"date":81,"score":82,"percentile":83},"2026-06-23",0.00296,0.21121,{"date":85,"score":82,"percentile":86},"2026-06-24",0.2115,{"date":88,"score":82,"percentile":89},"2026-06-25",0.21247,{"date":91,"score":82,"percentile":92},"2026-06-26",0.21281,{"date":94,"score":82,"percentile":95},"2026-06-27",0.21327,{"date":97,"score":82,"percentile":98},"2026-06-28",0.21294,{"date":100,"score":82,"percentile":101},"2026-06-29",0.21292,{"date":103,"score":82,"percentile":104},"2026-06-30",0.21264,{"date":106,"score":107,"percentile":108},"2026-07-01",0.00266,0.17994,{"date":110,"score":107,"percentile":111},"2026-07-02",0.1797,{"date":113,"score":107,"percentile":114},"2026-07-03",0.17974,{"date":116,"score":107,"percentile":117},"2026-07-04",0.17983,{"date":119,"score":107,"percentile":120},"2026-07-05",0.17992,{"date":122,"score":107,"percentile":123},"2026-07-06",0.17995,{"date":125,"score":107,"percentile":126},"2026-07-07",0.17987,{"date":128,"score":107,"percentile":129},"2026-07-08",0.17986,{"date":131,"score":107,"percentile":132},"2026-07-09",0.18012,{"date":134,"score":107,"percentile":135},"2026-07-10",0.18029,{"date":137,"score":138,"percentile":139},"2026-07-11",0.0025,0.16309,{"date":141,"score":138,"percentile":142},"2026-07-12",0.16294,{"date":144,"score":138,"percentile":145},"2026-07-13",0.1629,{"date":147,"score":138,"percentile":148},"2026-07-14",0.1632,{"date":150,"score":138,"percentile":151},"2026-07-15",0.16336,{"date":153,"score":138,"percentile":154},"2026-07-16",0.16356,{"date":156,"score":138,"percentile":157},"2026-07-17",0.16367,{"date":159,"score":138,"percentile":160},"2026-07-18",0.16376,{"date":162,"score":138,"percentile":163},"2026-07-19",0.16375,{"date":165,"score":138,"percentile":166},"2026-07-20",0.16476,{"date":168,"score":138,"percentile":169},"2026-07-21",0.1647,{"date":171,"score":138,"percentile":172},"2026-07-22",0.1653,{"date":174,"score":138,"percentile":175},"2026-07-23",0.16514,{"date":177,"score":61,"percentile":178},"2026-07-24",0.16556,{"date":180,"score":61,"percentile":181},"2026-07-25",0.16581,{"date":183,"score":61,"percentile":184},"2026-07-26",0.16571,{"date":186,"score":61,"percentile":187},"2026-07-27",0.16535,{"date":189,"score":61,"percentile":190},"2026-07-28",0.16591,{"date":192,"score":61,"percentile":193},"2026-07-29",0.1658,{"date":195,"score":61,"percentile":196},"2026-07-30",0.16587,{"date":198,"score":61,"percentile":190},"2026-07-31",{"date":200,"score":61,"percentile":201},"2026-08-01",0.16585,{"date":203,"score":61,"percentile":204},"2026-08-02",0.16579,{"date":206,"score":61,"percentile":201},"2026-08-03",{"date":208,"score":61,"percentile":209},"2026-08-04",0.16522,{"date":211,"score":61,"percentile":212},"2026-08-05",0.16462,{"date":214,"score":61,"percentile":215},"2026-08-06",0.16472,{"date":217,"score":61,"percentile":218},"2026-08-07",0.1648,{"date":220,"score":61,"percentile":221},"2026-08-08",0.16469,{"date":223,"score":61,"percentile":212},"2026-08-09",{"date":225,"score":61,"percentile":221},"2026-08-10",{"date":227,"score":61,"percentile":228},"2026-08-11",0.1656,{"date":230,"score":61,"percentile":231},"2026-08-12",0.1659,{"date":233,"score":61,"percentile":234},"2026-08-13",0.16605,{"date":236,"score":61,"percentile":237},"2026-08-14",0.16609,{"date":239,"score":61,"percentile":240},"2026-08-15",0.16763,{"date":242,"score":61,"percentile":243},"2026-08-16",0.16787,{"date":245,"score":61,"percentile":246},"2026-08-17",0.16706,{"date":248,"score":61,"percentile":249},"2026-08-18",0.16714,{"date":251,"score":61,"percentile":252},"2026-08-19",0.16774,{"date":254,"score":61,"percentile":243},"2026-08-20",{"date":256,"score":61,"percentile":257},"2026-08-21",0.16805,{"date":259,"score":61,"percentile":260},"2026-08-22",0.16811,{"date":262,"score":61,"percentile":263},"2026-08-23",0.16808,{"date":265,"score":61,"percentile":266},"2026-08-24",0.16184,{"date":268,"score":61,"percentile":269},"2026-08-25",0.16198,{"date":271,"score":61,"percentile":272},"2026-08-26",0.16249,{"date":274,"score":61,"percentile":275},"2026-08-27",0.16243,{"date":277,"score":61,"percentile":278},"2026-08-28",0.16268,{"date":280,"score":61,"percentile":281},"2026-08-29",0.16273,{"date":283,"score":61,"percentile":145},"2026-08-30",{"date":285,"score":61,"percentile":286},"2026-08-31",0.16285,{"date":288,"score":61,"percentile":289},"2026-09-01",0.163,{"date":291,"score":61,"percentile":292},"2026-09-02",0.1631,{"date":294,"score":61,"percentile":295},"2026-09-03",0.16311,{"date":297,"score":61,"percentile":298},"2026-09-04",0.16329,{"date":300,"score":61,"percentile":301},"2026-09-05",0.16366,{"date":303,"score":61,"percentile":304},"2026-09-06",0.16385,{"date":306,"score":61,"percentile":163},"2026-09-07",{"date":308,"score":61,"percentile":309},"2026-09-08",0.16386,{"date":311,"score":61,"percentile":312},"2026-09-09",0.16475,{"date":314,"score":61,"percentile":315},"2026-09-10",0.16467,{"date":317,"score":61,"percentile":318},"2026-09-11",0.16459,{"date":320,"score":61,"percentile":321},"2026-09-12",0.16564,{"date":323,"score":61,"percentile":324},"2026-09-13",0.16515,{"date":326,"score":61,"percentile":327},"2026-09-14",0.16533,{"date":329,"score":61,"percentile":330},"2026-09-15",0.16595,{"date":332,"score":61,"percentile":333},"2026-09-16",0.16654,{"date":335,"score":61,"percentile":336},"2026-09-17",0.16702,{"date":338,"score":61,"percentile":339},"2026-09-18",0.16839,{"date":77,"score":61,"percentile":78},[342,347],{"source":65,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":343,"cvss_v4_0":9},{"baseScore":63,"baseSeverity":344,"vectorString":66,"impactScore":345,"exploitabilityScore":346},"HIGH",8.7,5.4,{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":348,"cvss_v4_0":9},{"baseScore":346,"baseSeverity":349,"vectorString":350,"impactScore":351,"exploitabilityScore":352},"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",4.5,5.9,[354,361],{"ecosystem":9,"name":355,"vendor":355,"product":355,"cpe_part":356,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":357},"grafana","a",[358],{"version":359,"is_range":59,"range_type":360,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"12.4.0","cpe",{"ecosystem":9,"name":362,"vendor":355,"product":363,"cpe_part":356,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":364},"Grafana OSS","grafana oss",[365,367,371],{"version":359,"is_range":59,"range_type":65,"version_start":359,"version_start_type":366,"version_end":359,"version_end_type":366,"fixed_in":9},"including",{"version":368,"is_range":369,"range_type":65,"version_start":359,"version_start_type":366,"version_end":370,"version_end_type":366,"fixed_in":9},">= 12.4.0, \u003C= 12.4.3",true,"12.4.3",{"version":372,"is_range":369,"range_type":65,"version_start":373,"version_start_type":366,"version_end":374,"version_end_type":366,"fixed_in":9},">= 13.0.0, \u003C= 13.0.1","13.0.0","13.0.1"]