CVE-2026-21726
MediumAdvisory
Published 15 Apr 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.004
- 34th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 77
- of 17,781 indexed, latest versions
- Container images
- 74
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Grafana Loki Path Traversal - CVE-2021-36156 Bypass
Carried by container images the latest versions of 77 of 17,781 indexed charts deploy, on 74 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20240918161252-659f5421dde1, v0.0.0-20241218164224-23b5fc2c9b1a, v3.0.0, v3.0.0-20240513110952-8622293f23b1+17 more | 3.6.4 | 43 |
| github.com/ | v1.6.0, v1.6.2-0.20201026154740-6978ee5d7387, v1.6.2-0.20210429132126-d88f3996eaa2, v1.6.2-0.20210520072447-15d417efe103+10 more | no fix listed | 31 |
- OSV records
- GHSA-497x-rrr9-68jpGO-2026-5115
Charts affected
77 by stars
Container images carrying it
74 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 00568d89c4f8 | github.com/ | no fix listed | 3 |
| grafana/ | 58a6c186ce78 | github.com/ | 3.6.4 | 3 |
| grafana/ | d70e4659623f | github.com/ | 3.6.4 | 3 |
| governify/ | e83a17ba5038 | github.com/ | no fix listed | 2 |
| grafana/ | 7790f6f7fbd8 | github.com/ | 3.6.4 | 2 |
| grafana/ | f94b1c82957a | github.com/ | 3.6.4 | 2 |
| grafana/ | 2175aaa91c96 | github.com/ | 3.6.4 | 2 |
| grafana/ | 42d3e6bc1865 | github.com/ | no fix listed | 2 |
| grafana/ | 511bc20bfcd1 | github.com/ | no fix listed | 2 |
| grafana/ | 9e1e77ade304 | github.com/ | 3.6.4 | 2 |
| grafana/ | e932bd6ed0e0 | github.com/ | 3.6.4 | 2 |
| grafana/ | 44148ad243c0 | github.com/ | 3.6.4 | 2 |
| grafana/ | d947e68a84d9 | github.com/ | 3.6.4 | 2 |
| grafana/ | 3364714a2f64 | github.com/ | no fix listed | 1 |
| grafana/ | 825c09373d27 | github.com/ | no fix listed | 1 |
| grafana/ | f6cbec9409be | github.com/ | no fix listed | 1 |
| grafana/ | 01a63f4e032c | github.com/ | 3.6.4 | 1 |
| grafana/ | 06bdcbb51fc2 | github.com/ | 3.6.4 | 1 |
| grafana/ | 8c7256f412fe | github.com/ | 3.6.4 | 1 |
| grafana/ | c3dac4e26471 | github.com/ | no fix listed | 1 |
| grafana/ | f50931848bd8 | github.com/ | 3.6.4 | 1 |
| grafana/ | 09bb407e26ab | github.com/ | no fix listed | 1 |
| grafana/ | 0f86bada30d6 | github.com/ | 3.6.4 | 1 |
| grafana/ | 15b977f5207d | github.com/ | no fix listed | 1 |
| grafana/ | 2d1f9ae67c17 | github.com/ | 3.6.4 | 1 |
| grafana/ | 2ebef928d7e5 | github.com/ | 3.6.4 | 1 |
| grafana/ | 35c41e0fd029 | github.com/ | 3.6.4 | 1 |
| grafana/ | 5781759b3d27 | github.com/ | 3.6.4 | 1 |
| grafana/ | 62d2b9d20a19 | github.com/ | 3.6.4 | 1 |
| grafana/ | 696823fbc561 | github.com/ | no fix listed | 1 |
| grafana/ | 6d42886b3ebe | github.com/ | no fix listed | 1 |
| grafana/ | 70d9599b186c | github.com/ | 3.6.4 | 1 |
| grafana/ | 733842cca5bd | github.com/ | no fix listed | 1 |
| grafana/ | 74144189b384 | github.com/ | 3.6.4 | 1 |
| grafana/ | 8b37a2f028f1 | github.com/ | 3.6.4 | 1 |
| grafana/ | a1701c218024 | github.com/ | 3.6.4 | 1 |
| grafana/ | a738d0744784 | github.com/ | no fix listed | 1 |
| grafana/ | b5b59bfc7561 | github.com/ | 3.6.4 | 1 |
| grafana/ | ba93c9d192e5 | github.com/ | 3.6.4 | 1 |
| grafana/ | cd7cb4345aa7 | github.com/ | no fix listed | 1 |
| grafana/ | cf81d2c753c8 | github.com/ | no fix listed | 1 |
| grafana/ | d322192ed2fa | github.com/ | no fix listed | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | no fix listed | 1 |
| grafana/ | 35b02acc6765 | github.com/ | no fix listed | 1 |
| grafana/ | 6074e01dbe03 | github.com/ | no fix listed | 1 |
| grafana/ | 6ca6e2cd3b6f | github.com/ | no fix listed | 1 |
| grafana/ | 757b5fadf816 | github.com/ | 3.6.4 | 1 |
| grafana/ | 87f0a0676737 | github.com/ | 3.6.4 | 1 |
| grafana/ | 882e30c20683 | github.com/ | 3.6.4 | 1 |
| grafana/ | 8af2de1abbdd | github.com/ | 3.6.4 | 1 |