Dismissed
Permalink
CVE-2025-68540
9.8 CRITICAL
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
35 packages
- grafana
- grafanactl
- mcp-grafana
- grafana-loki
- grafana-alloy
- grafana-kiosk
- grafana-to-ntfy
- grafana-dash-n-grab
- grafana-image-renderer
- dhallPackages.dhall-grafana
- terraform-providers.grafana
- python312Packages.grafanalib
- python313Packages.grafanalib
- haskellPackages.amazonka-grafana
- grafanaPlugins.grafana-oncall-app
- grafanaPlugins.grafana-clock-panel
- terraform-providers.grafana_grafana
- grafanaPlugins.grafana-pyroscope-app
- python312Packages.mypy-boto3-grafana
- python313Packages.mypy-boto3-grafana
- grafanaPlugins.grafana-piechart-panel
- grafanaPlugins.grafana-polystat-panel
- grafanaPlugins.grafana-worldmap-panel
- grafanaPlugins.grafana-lokiexplore-app
- grafanaPlugins.grafana-mqtt-datasource
- grafanaPlugins.grafana-exploretraces-app
- grafanaPlugins.grafana-github-datasource
- grafanaPlugins.grafana-sentry-datasource
- grafanaPlugins.grafana-discourse-datasource
- grafanaPlugins.grafana-metricsdrilldown-app
- python312Packages.types-aiobotocore-grafana
- python313Packages.types-aiobotocore-grafana
- grafanaPlugins.grafana-clickhouse-datasource
- grafanaPlugins.grafana-opensearch-datasource
- grafanaPlugins.grafana-googlesheets-datasource
- @LeSuisse dismissed
WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.
References
Affected products
fana
- =<<= 1.1.35