medium4.3
CVE-2025-10630
Grafana-Zabbix ReDoS vulnerability
Impact
Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via user-supplied regex query which could causes CPU usage to max out. This vulnerability is fixed in version 6.0.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/alexanderzobnin/grafana-zabbix | < 6.0.0 | 6.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/grafana/grafana-zabbix/releases/tag/v6.0.0
- https://grafana.com/security/security-advisories/cve-2025-10630/
- https://github.com/advisories/GHSA-g4rr-88fc-26fj
- https://nvd.nist.gov/vuln/detail/CVE-2025-10630
- https://grafana.com/security/security-advisories/cve-2025-10630
- https://pkg.go.dev/vuln/GO-2025-3976