Vulnerability Report: GO-2024-2661

Affected Modules

• Path
  Go Versions
  Custom Versions^*
• github.com/grafana/grafana
  all versions, no known fixed
  before 6.4.4

^{*Custom versions, which can't be mapped automatically to standard Go module versions, are ignored by govulncheck. (See this note on versions for more details.)}

Aliases

• CVE-2019-19499
• GHSA-4pwp-cx67-5cpx

References

• https://github.com/grafana/grafana/pull/20192
• https://github.com/grafana/grafana/blob/master/CHANGELOG.md#644-2019-11-06
• https://security.netapp.com/advisory/ntap-20200918-0003
• https://swarm.ptsecurity.com/grafana-6-4-3-arbitrary-file-read
• https://vuln.go.dev/ID/GO-2024-2661.json

Feedback