Affected by GO-2022-0342
and 27 other vulnerabilities
GO-2022-0342 : Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana
GO-2022-0707 : Grafana Authentication Bypass in github.com/grafana/grafana
GO-2024-2483 : Grafana XSS via adding a link in General feature in github.com/grafana/grafana
GO-2024-2510 : Grafana Cross-site Scripting (XSS) in github.com/grafana/grafana
GO-2024-2513 : Grafana information disclosure in github.com/grafana/grafana
GO-2024-2515 : Grafana XSS via the OpenTSDB datasource in github.com/grafana/grafana
GO-2024-2516 : Grafana XSS via a column style in github.com/grafana/grafana
GO-2024-2517 : Grafana XSS in header column rename in github.com/grafana/grafana
GO-2024-2519 : Grafana world readable configuration files in github.com/grafana/grafana
GO-2024-2520 : Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana
GO-2024-2523 : Grafana stored XSS in github.com/grafana/grafana
GO-2024-2629 : Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana
GO-2024-2661 : Arbitrary file read in github.com/grafana/grafana
GO-2024-2697 : Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana
GO-2024-2843 : Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana
GO-2024-2844 : Grafana User enumeration via forget password in github.com/grafana/grafana
GO-2024-2847 : Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana
GO-2024-2848 : Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana
GO-2024-2851 : Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana
GO-2024-2852 : Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana
GO-2024-2854 : Grafana folders admin only permission privilege escalation in github.com/grafana/grafana
GO-2024-2855 : Grafana Plugin signature bypass in github.com/grafana/grafana
GO-2024-2856 : Grafana Race condition allowing privilege escalation in github.com/grafana/grafana
GO-2024-2857 : Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana
GO-2024-2867 : Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana
GO-2024-3079 : Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana
GO-2024-3215 : Grafana Command Injection And Local File Inclusion Via Sql Expressions in github.com/grafana/grafana
GO-2024-3240 : Grafana org admin can delete pending invites in different org in github.com/grafana/grafana
Discover Packages
github.com/grafana/grafana
pkg
build
package
Version:
v0.0.1-test
Opens a new window with list of versions in this module.
Published: Oct 6, 2022
License: AGPL-3.0
Opens a new window with license information.
Imports: 16
Opens a new window with list of imports.
Imported by: 1
Opens a new window with list of known importers.
Documentation
Documentation
¶
Package build contains the command / functions for the Grafana build process used when running the "build" target in the makefile
View Source
const (
GoOSWindows = "windows"
GoOSLinux = "linux"
ServerBinary = "grafana-server"
CLIBinary = "grafana-cli"
)
LinuxPackageVersion extracts the linux package version and iteration out of the version string. The version string is likely extracted from the package JSON.
RunCmd runs the build command and returns the exit code
type BuildOpts struct {
}
BuildOpts are options provided to the build step
BuildOptsFromFlags reads the cmd args to assemble a BuildOpts object. This function calls flag.Parse()
type PackageJSON struct {
Version string `json:"version"`
}
Opens the package.json file in the provided directory and returns a struct that represents its contents
Source Files
¶
Directories
¶
Package droneutil provides utility functions for working with Drone.
Package droneutil provides utility functions for working with Drone.
Package golangutils holds utility functions, wrappers, and types for building Go binaries for Grafana.
Package golangutils holds utility functions, wrappers, and types for building Go binaries for Grafana.
Package packaging holds functions and types for creating the tar.gz, deb, and rpm packages of Grafana.
Package packaging holds functions and types for creating the tar.gz, deb, and rpm packages of Grafana.
Package validation provides functions and types for validating Grafana releases in both the pre-release and post-release phases.
Package validation provides functions and types for validating Grafana releases in both the pre-release and post-release phases.
Click to show internal directories.
Click to hide internal directories.