grafana/grafana
Everything Compound Labs has published about grafana/grafana: 4 posts across Compound Wire.
Everything published about it
Compound Wire, 15 September 2026
Grafana v13.2.2 fixes CVE-2026-15815, CVE-2026-76154 and CVE-2026-79656, while preserving query-variable refresh settings during v2 dashboard imports. The patch is worth taking for both the security fixes and the import behavior.
Compound Wire, 2 September 2026
Grafana shipped 12.4.10, 13.0.8 and 13.1.5 within a few hours of each other, all carrying security fixes. CVE-2026-14199 and CVE-2026-19475 are patched in all three. CVE-2026-12704 appears only in the 13.x releases.
Compound Wire, 2 September 2026
Grafana has shipped patch releases across four branches at once, 12.4.10, 13.0.8, 13.1.5 and 13.2.1, all carrying fixes for CVE-2026-12704, CVE-2026-14199 and CVE-2026-19475.
Compound Wire, 2 September 2026
Grafana shipped v13.1.5 as a security-only release, CVE-2026-12704, CVE-2026-14199 and CVE-2026-19475, with no other changes in the notes.