UpHeron
All vulnerabilities

Servers and applications

CVE-2026-33374

Unbounded memory allocation in the Prometheus rule conversion API

Severity
Medium 6.5
Published
13 Oct 2026
Last changed
13 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.4.13, 13.0.11, 13.1.8, 13.2.4
Sources
CVE Program

Affected software

SoftwareAffected versions
GrafanaServers and applications · cna:grafana|grafana enterprise
  • From 12.0.0 up to 12.3.11
  • From 12.4.0 before 12.4.13
  • From 13.0.0 before 13.0.11
  • From 13.1.0 before 13.1.8
  • From 13.2.0 before 13.2.4

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-33374