Graphite Project - vulnerabilities (CVEs)

8 CVEs in 1 products, 0 in the last 30 days, newest from 2026-06-05.

Products

• Graphite - 8 CVEs

Newest CVEs of Graphite Project

• CVE-2026-50593 - CVSS 7.3 (high), 2026-06-05: Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is…
• CVE-2022-4729 - CVSS 5.4 (medium), 2022-12-27: A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler.…
• CVE-2022-4728 - CVSS 5.4 (medium), 2022-12-27: A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The…
• CVE-2022-4730 - CVSS 5.4 (medium), 2022-12-27: A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range…
• CVE-2017-18638 - CVSS 7.5 (high), 2019-10-11: send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an…
• CVE-2013-5943 - CVSS 4.3 (medium), 2013-09-27: Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified…
• CVE-2013-5942 - CVSS 6.8 (medium), 2013-09-27: Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object,…
• CVE-2013-5093 - CVSS 6.8 (medium), 2013-09-27: The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote…