Grafana Labs Enterprise Metrics
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Grafana Labs Enterprise Metrics.
By the Year
In 2026 there have been 0 vulnerabilities in Grafana Labs Enterprise Metrics. Enterprise Metrics did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 1 | 8.80 |
| 2021 | 1 | 5.50 |
It may take a day or so for new Enterprise Metrics vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Grafana Labs Enterprise Metrics Security Vulnerabilities
Grafana Enterprise Metrics 1.x/2.x: Label-based ACL Bypass (CVE-2022-44643)
CVE-2022-44643
8.8 - High
- December 20, 2022
A vulnerability in the label-based access control of Grafana Labs Grafana Enterprise Metrics allows an attacker more access than intended. If an access policy which has label selector restrictions also has been granted access to all tenants in the system, the label selector restrictions will not be applied when using this policy with the affected versions of the software. This issue affects: Grafana Labs Grafana Enterprise Metrics GEM 1.X versions prior to 1.7.1 on AMD64; GEM 2.X versions prior to 2.3.1 on AMD64.
The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used
CVE-2021-31231
5.5 - Medium
- April 30, 2021
The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Grafana Labs Enterprise Metrics or by Grafana Labs? Click the Watch button to subscribe.
