Package
grafana-geomys-fips-13.1
Component
github.com/grafana/grafana
Latest update
Fixed version
13.1.6-r0
7.1
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
13.1.6-r0Impact
Grafana's v13.1.5 git tag was cut one commit before the release commit that applied the security patches, so packages built from that tag still derived the auth-proxy cache key by concatenating fields without a delimiter. 13.1.6 is built from a tag that includes the length-prefixed cache key. NVD lists every 13.1.x release before 13.2.1 as affected, so scanners keep reporting 13.1.6.
Status