UpHeron
All vulnerabilities

Servers and applications

CVE-2026-79656

OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors

Severity
Medium 6.0
Published
28 Oct 2026
Last changed
28 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.4.11, 13.0.9, 13.1.6, 13.2.2
Sources
CVE Program

Affected software

SoftwareAffected versions
GrafanaServers and applications · cna:grafana|grafana enterprise
  • Every version up to 12.3.11
  • From 12.4.0 before 12.4.11
  • From 13.0.0 before 13.0.9
  • From 13.1.0 before 13.1.6
  • From 13.2.0 before 13.2.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-79656