CVE-2026-95502 — Git Sync memory exhaustion via a malicious Git server
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resourc…
Published: 2026-10-13 · CVSS: 5.3 · CVSS 3.1
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7