CGA-w2fv-rmjp-cc37

Package

grafana-11.6

Component

github.com/openfga/openfga

Latest update

Pending upstream fix

Aliases

CVE-2026-24851
GHSA-jq9f-gm9w-rwm9
GO-2026-4446

Severity

Unknown

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24851
https://github.com/advisories/GHSA-jq9f-gm9w-rwm9
https://pkg.go.dev/vuln/GO-2026-4446

Updates

Status

Pending upstream fix

Impact

Migration to openfga v1.11.3 or newer requires significant code changes. Consider using a newer release of Grafana.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-w2fv-rmjp-cc37

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company