13.3.0

2026-10-28T08:51:32Z•527a4f6de7f378cf3321dfd330f3c310d612db2a159eb0fca57f8402b565303c

CVE-2026-100105CVE-2026-103506CVE-2026-13719CVE-2026-13720CVE-2026-15577CVE-2026-33374CVE-2026-81841CVE-2026-88858CVE-2026-88967CVE-2026-92539CVE-2026-93294CVE-2026-95502GrafanaOAuth2access-controldashboardpatch-managementprovisioningreleasesecurity-updatevulnerability-fix

Open source link →

What happened

Grafana releases 13.3.0 and maintenance updates across the 12.4, 13.0, 13.1, and 13.2 branches address multiple security vulnerabilities. The latest release, 13.3.0, fixes nine listed CVEs, while backport releases fix subsets including CVE-2026-100105, CVE-2026-88858, and CVE-2026-88967. Updates also include security hardening for OAuth2 cross-host redirects and access-control behavior.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: grafana_grafana_releases
Record identifier: 527a4f6de7f378cf3321dfd330f3c310d612db2a159eb0fca57f8402b565303c
Enrichment time: 2026-10-28T08:51:32Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records