Grafana 13.0.7 → 13.0.11
4 releases · 0 breaking changes · 15 security fixes · 0 advisories fixed
15security0breaking0deprecated2feature2fix
Breaking changes
None in the release notes.
Security changes
- security Security: Fix CVE-2026-15577 in 13.0.11
- security Security: Fix CVE-2026-33374 in 13.0.11
- security Security: Fix CVE-2026-93294 in 13.0.11
- security Security: Fix CVE-2026-95502 in 13.0.11
- security CVE-2026-92539: IAM: Fix: Scim endpoints (Enterprise) in 13.0.11
- security Security: Fix CVE-2026-13719 in 13.0.10
- security Security: Fix CVE-2026-13720 in 13.0.10
- security Security: Fix CVE-2026-81841 in 13.0.10
- security Security: Fix CVE-2026-81842 in 13.0.10
- security Security: Fix CVE-2026-15815 in 13.0.9
- security Security: Fix CVE-2026-76154 in 13.0.9
- security Security: Fix CVE-2026-79656 in 13.0.9
- security Security: Fix CVE-2026-12704 in 13.0.8
- security Security: Fix CVE-2026-14199 in 13.0.8
- security Security: Fix CVE-2026-19475 in 13.0.8
Every release in between
securitySecurity: Fix CVE-2026-15577
securitySecurity: Fix CVE-2026-33374
securitySecurity: Fix CVE-2026-93294
securitySecurity: Fix CVE-2026-95502
featureAlerting: Strip sensitive headers from oauth2 cross-host redirects
featureDashboard: Fall back when collection deletion is unsupported
securityCVE-2026-92539: IAM: Fix: Scim endpoints (Enterprise)
securitySecurity: Fix CVE-2026-13719
securitySecurity: Fix CVE-2026-13720
securitySecurity: Fix CVE-2026-81841
securitySecurity: Fix CVE-2026-81842
securitySecurity: Fix CVE-2026-15815
securitySecurity: Fix CVE-2026-76154
securitySecurity: Fix CVE-2026-79656
fixDashboards: Preserve query variable refresh setting on v2 dashboard import
securitySecurity: Fix CVE-2026-12704
securitySecurity: Fix CVE-2026-14199
securitySecurity: Fix CVE-2026-19475
fixDashboards: Fix version dates and user display names in the legacy version history page