Vulnerability Response for Large Open Source Projects - Jo Guerreiro & Charline Voinot, Grafana Labs
Vulnerability management Cve Grafana Open source security Patch deployment Security operations Cloud native Multi Tenancy Cve 2023 3128 Incident response
This talk explores Grafana Labs' approach to vulnerability response for large open source projects, using CVE-2023-3128 as a case study. It covers vulnerability classification, patch distribution from cloud to millions of instances worldwide, and maintaining community transparency without compromising security. Targeted at security teams, open source maintainers, and DevOps/SRE professionals managing vulnerability response at scale.
Related videos
Alert fatigue, AI triage, and incidents: Lessons from observability experts at Cyera, PlayHQ & NAB
Investigations Arena: how we test Assistant investigations
Automatically starting investigations from an alert with Assistant Investigations
Grafana Tempo: The distributed tracing journey to 3.0 (June 2026 Community Call)
When the Cloud Fails: Debugging the "Undocumented" - Dhruv Jain, Gojek (GoTo Group) Indonesia
Why 72px Stream Deck Panels Beat Wall Displays in Incidents
Incident Response Management (IRM) overview | Grafana Cloud
k8s-monitoring-helm Chart Office Hours (April 2026)
this is crazy.
k8s-monitoring-helm Chart Office Hours (August 2026)
PointsBet's Observability 2.0 Journey: Breaking vendor lock-in with OpenTelemetry and Grafana Cloud
