Grafana

Grafana 13.0.10 fixes four CVEs: CVE-2026-13719, CVE-2026-13720, CVE-2026-81841, and CVE-2026-81842.

Matters for: Relevant for teams operating self-hosted Grafana instances who need to track and patch disclosed CVEs as part of vulnerability management.

Grafana 12.4.12 fixes four security vulnerabilities, CVE-2026-13719, CVE-2026-13720, CVE-2026-81841, and CVE-2026-81842, and also corrects Unified Storage to return a 403 instead of a 500 on namespace mismatch. No breaking changes are introduced, so no action beyond upgrading is required.

Matters for: Operators running Grafana instances exposed to untrusted users or networks who need to patch known CVEs promptly.

This release lets teams import alerting configurations into a unified GMA model with staged review, promotion, and auto-sync, and expands Git-based provisioning with GitHub Enterprise, GitLab, and Bitbucket webhook support plus commit attribution. It also patches security vulnerability CVE-2026-17183, and no breaking changes are indicated.

Matters for: Relevant for platform teams managing alerting migrations at scale and for organizations using GitOps-based dashboard provisioning with GitHub Enterprise, GitLab, or Bitbucket.