12.4.4
2026-06-10T08:51:44Z•3c4c62d7dbe161e5aa311afbfb05dfc2ace41d1255a6aa6d65a3c184d6e432d9
alpinecvedockergRPCgografanagraphitekuberneteslibrarypanelspatchreleasesecurity
What happened
Grafana released multiple patched builds (including 13.0.2, 12.4.4, 12.3.7, 12.2.9, 11.6.15 and several +security builds) addressing numerous security issues and functional bugs. Fixes include multiple CVEs across 2026 (see list), updates to Go (1.26.3) and Alpine-based Docker images (Alpine 3.23.4), gRPC header sanitisation, permission-handling fixes (LibraryPanels returning 403 instead of 500), Graphite aliasSub path stripping, and other bug/performance improvements. Operators should prioritize upgrading to the patched releases to remediate the listed vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- grafana_grafana_releases
- Record identifier
- 3c4c62d7dbe161e5aa311afbfb05dfc2ace41d1255a6aa6d65a3c184d6e432d9
- Enrichment time
- 2026-06-10T08:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.