Grafana Testdata datasource can issue unbounded memory allocations

Medium

Advisory ID:: CVE-2026-28375
Published:: 2026-03-30
Product:: Grafana
CVSS Score:: 6.5
CVSS Vector:: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Fixed Versions:: <8.1.0
>=11.6.14 <12.0.0
>=12.1.10 <12.2.0
>=12.2.8 <12.3.0
>=12.3.6 <12.4.0
>=12.4.2

Summary

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.