Detections
Analytics
CVE-2026-28383
medium
Description
A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service.
References
https://grafana.com/security/security-advisories/cve-2026-28383