/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-23gm-jq6v-j2w7

Published

Last updated

https://images.chainguard.dev/security/CGA-23gm-jq6v-j2w7
Package

grafana-11.0

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2025-4123
  • GHSA-q53q-gxq9-mgrj

Severity

6.1

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-4123

Updates

Status

Fix not planned

Impact

The upstream project does not plan to address CVE-2025-4123. Upgrading to latest version addresses issue

Status

Under investigation

Status

Fixed

Fixed version

11.0.11-r3

Status

Affected

Impact

Unable to use govulncheck to triage this advisory because the vulnerability was not found in the Go vuln DB. Treating as a true positive since we can't confirm this is a false positive.

Status

Under investigation

Status

Fixed

Fixed version

11.0.11-r2

Status

Affected

Impact

Unable to use govulncheck to triage this advisory because the vulnerability was not found in the Go vuln DB. Treating as a true positive since we can't confirm this is a false positive.

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing