GitHub Advisoryadvisory · Go

GHSA-g4rr-88fc-26fj Grafana-Zabbix ReDoS vulnerability

MEDIUM Published 2025-09-19 Modified 2025-09-26 Official page ↗
Aliases
CVE-2025-10630
Ecosystem
Go
Packages
github.com/alexanderzobnin/grafana-zabbix
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-20
Reviewed
2025-09-19

Affected packages

• Go github.com/alexanderzobnin/grafana-zabbix: < 6.0.0 → fixed in 6.0.0

Description

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring.  Versions 5.2.1 and below contained a ReDoS vulnerability via user-supplied regex query which could causes CPU usage to max out. This vulnerability is fixed in version 6.0.0.

Related

Alias · CVE (1)

  • CVE-2025-10630 Grafana is an open-source platform for monitoring and observability. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References