pkg/storage/dbproxy/v0.1.0
2026-11-07T08:51:32Z•06c684ea5e9c8445547f51d665104214bc25d1e30c33dca71562be3fb4643012
CVE-2026-100105CVE-2026-103506CVE-2026-13719CVE-2026-13720CVE-2026-15577CVE-2026-33374CVE-2026-81841CVE-2026-88858CVE-2026-88967CVE-2026-92539CVE-2026-93294CVE-2026-95502Git-SyncGrafanaOAuth2cross-host-redirectdashboardmonitoringprovisioningsecurity-updatesoftware-releasevulnerability-remediation
What happened
Grafana releases 13.3.0 and maintenance updates across the 13.2, 13.1, 13.0, and 12.4 branches include fixes for numerous security vulnerabilities. Updates address OAuth2 cross-host redirect header exposure, dashboard and provisioning behaviors, Git Sync handling, and additional vulnerabilities detailed in the truncated release notes. Organizations should upgrade to the latest supported maintenance release.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- grafana_grafana_releases
- Record identifier
- 06c684ea5e9c8445547f51d665104214bc25d1e30c33dca71562be3fb4643012
- Enrichment time
- 2026-11-07T08:51:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.