What is GHSA-xcrv-g5fh-9wx2?

GHSA-xcrv-g5fh-9wx2 is a security advisory published by GitHub Security Advisories with High severity. Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request...

Which CVE IDs does GHSA-xcrv-g5fh-9wx2 cover?

GHSA-xcrv-g5fh-9wx2 covers the following CVE IDs: CVE-2026-33382. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xcrv-g5fh-9wx2?

GHSA-xcrv-g5fh-9wx2 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-xcrv-g5fh-9wx2HighCVSS 7.5

Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request...

Vendor

GitHub Security Advisories

Published

July 10, 2026

Last Modified

July 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-33382 →

📋 Description

Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-33382
https://grafana.com/security/security-advisories/cve-2026-33382
https://github.com/advisories/GHSA-xcrv-g5fh-9wx2