—
GO-2025-3843
Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource
Quick fix
GO-2025-3843 — github.com/grafana/grafana-infinity-datasource: upgrade to the fixed version with the command below.
go get github.com/grafana/grafana-infinity-datasource@v1.4.2-0.20250731100004-9c736aa21b3aDetails
Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/grafana/grafana-infinity-datasource
Introduced in:
0Fixed in: 1.4.2-0.20250731100004-9c736aa21b3aFix
go get github.com/grafana/grafana-infinity-datasource@v1.4.2-0.20250731100004-9c736aa21b3aReferences
- https://github.com/advisories/GHSA-3c93-92r7-j934[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2025-8341[ADVISORY]
- https://github.com/grafana/grafana-infinity-datasource/commit/9c736aa21b3a669d3070d3f5f80d949326fafa77[FIX]
- https://github.com/grafana/grafana-infinity-datasource/releases/tag/v3.4.1[WEB]
- https://grafana.com/security/security-advisories/cve-2025-8341[WEB]