Grafana Loki Datasource — known CVE vulnerabilities

Every CVE whose affected-product data names Grafana Loki Datasource, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-42129 — CVSS 7.7 (high): The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An authenticated Viewer-role user can escape the…