Is Grafana 13.0.12 affected?
Oct 27, 2026 · Release notes ↗
2 known vulnerabilities affect 13.0.12 (highest CVSS 7.1).
17 newer releases in its track, up to 13.3.0. What changed up to 13.3.0
Vulnerabilities affecting 13.0.12
- 7.1 CVE-2026-14199 Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and for… fixed in 13.1.0
- 4.3
Newer releases
| 13.3.0 | Oct 27, 2026 | 13.0.12 → 13.3.0 |
| 13.2.5 | Oct 27, 2026 | 13.0.12 → 13.2.5 |
| 13.2.4 | Oct 13, 2026 | 13.0.12 → 13.2.4 |
| 13.2.3 | Sep 29, 2026 | 13.0.12 → 13.2.3 |
| 13.2.2 | Sep 15, 2026 | 13.0.12 → 13.2.2 |
| 13.2.1 | Sep 2, 2026 | 13.0.12 → 13.2.1 |
| 13.2.0 | Aug 18, 2026 | 13.0.12 → 13.2.0 |
| 13.1.9 | Oct 27, 2026 | 13.0.12 → 13.1.9 |
| 13.1.8 | Oct 13, 2026 | 13.0.12 → 13.1.8 |
| 13.1.7 | Sep 29, 2026 | 13.0.12 → 13.1.7 |
| 13.1.6 | Sep 15, 2026 | 13.0.12 → 13.1.6 |
| 13.1.5 | Sep 2, 2026 | 13.0.12 → 13.1.5 |
| 13.1.4 | Aug 18, 2026 | 13.0.12 → 13.1.4 |
| 13.1.3 | Aug 7, 2026 | 13.0.12 → 13.1.3 |
| 13.1.2 | Aug 4, 2026 | 13.0.12 → 13.1.2 |