Oct 9, 2025
1 new incident, 1 with updates.
Started
- ClosedPatched
Grafana Labs Grafana: Grafana Path Traversal Vulnerability
Grafana contains a path traversal vulnerability that could allow access to local files. Added to CISA KEV on 2025-10-09.
Grafana Labs GrafanaClosed Oct 9, 2025
Updated
- ClosedHighNo fix needed
Discord support vendor breach exposes ~70,000 government ID photos
An attacker got into a third-party customer-service system Discord used, exposing data of users who had contacted Support or Trust & Safety. About 70,000 users may have had government ID photos (from age-verification appeals) accessed. Discord named the vendor as 5CA, which denied its systems were hacked.
Discord customer support (third-party vendor / ticketing)Closed Oct 9, 2025
