— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Grafana Labs - Vulnerability Disclosure Program (VDP).
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"id": "69a64cbf-305d-4f48-90e5-0b7377c67bac",
"name": "Grafana Labs - Vulnerability Disclosure Program (VDP)",
"company_handle": "grafanalabs",
"handle": "grafanalabsvdp",
"url": "https://www.intigriti.com/programs/grafanalabs/grafanalabsvdp/detail",
"status": "open",
"confidentiality_level": "public",
"tacRequired": false,
"twoFactorRequired": false,
"min_bounty": {
"value": 0,
"currency": "USD"
},
"max_bounty": {
"value": 0,
"currency": "USD"
},
"targets": {
"in_scope": [
{
"type": null,
"endpoint": "https://github.com/grafana/grafana",
"description": null,
"impact": "Tier 1"
},
{
"type": "other",
"endpoint": "Non-Core Grafana Plugins",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/alloy",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/faro-web-sdk",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/k6",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/beyla",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/pyroscope",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/loki",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/mimir",
"description": null,
"impact": "Tier 1"
},
{
"type": null,
"endpoint": "https://github.com/grafana/tempo",
"description": null,
"impact": "Tier 1"
},
{
"type": "wildcard",
"endpoint": "https://github.com/grafana/*",
"description": null,
"impact": "Tier 2"
}
],
"out_of_scope": []
}
}Non-Core Grafana Plugins· Tier 1— none listed —