Grafana

Grafana Labs · current 13.2.3

Are you Grafana Labs? Claim this page

The current version of Grafana is 13.2.3 (as of 29/09/2026). patchletter checks the official source daily and emails you new releases.

Actively exploited vulnerabilities

The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.

  • CVE-2021-43798Grafana Path Traversal Vulnerability

    7.5 high · over the network, without login · CISA deadline was 30 Oct 25

  • CVE-2021-39226Grafana Authentication Bypass Vulnerability

    7.3 high · over the network, without login · CISA deadline was 15 Sept 22

Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.

BSI security advisories

Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.

All BSI advisories →

Grafana at a glance

Grafana is the de-facto standard for observability dashboards, visualizing metrics, logs and traces from many data sources. Grafana Labs ships frequent releases plus security fixes; as a dashboard often reachable from the network and holding data-source credentials, it deserves prompt updates.

For admins updates are usually straightforward (swap the binary/container); larger jumps can bring configuration and plugin changes — read the upgrade notes and back up the database first. Plugins have their own cycles. Grafana belongs behind authentication (ideally SSO) and off the open internet, since a dashboard can expose a lot about the infrastructure and its data sources. Several Grafana advisories concerned authentication and data-source proxying, so apply security releases promptly. Track the version and its support status.

Support cycles (endoflife.date)

CycleLatest versionStatus
13.213.2.3EOL 18 May 27
13.113.1.7EOL 20 Mar 27
13.013.0.10EOL 9 Jan 27
12.412.4.12EOL 24 May 27
12.312.3.11End of Life
12.212.2.10End of Life
12.112.1.10+security-01End of Life
12.012.0.10End of Life

Version history & changelog · as detected by patchletter

VersionChannelDateNotes
13.2.3STABLE29/09/2026Release notes →
13.2.2STABLE15/09/2026–
13.2.1STABLE01/09/2026–
13.2.0STABLE18/08/2026Release notes →
13.1.4STABLE18/08/2026–
13.1.3STABLE07/08/2026Release notes →
13.1.2STABLE04/08/2026–
13.1.1STABLE21/07/2026Release notes →
13.1.0STABLE01/07/2026Release notes →
13.0.4STABLE21/07/2026Release notes →
13.0.3STABLE23/06/2026Release notes →
13.0.2STABLE09/06/2026Release notes →
13.0.1STABLE17/04/2026Release notes →
13.0.1+security-01STABLE12/05/2026Release notes →
12.4.6STABLE21/07/2026Release notes →
12.4.5STABLE23/06/2026Release notes →
12.4.4STABLE09/06/2026Release notes →
12.4.3STABLE14/04/2026Release notes →
12.4.3+security-02STABLE12/05/2026Release notes →
12.4.2STABLE25/03/2026Release notes →
12.4.1STABLE09/03/2026Release notes →
12.4.0STABLE25/02/2026Release notes →
12.3.9STABLE21/07/2026Release notes →
12.3.8STABLE23/06/2026Release notes →
12.3.7STABLE09/06/2026Release notes →
12.3.6STABLE26/03/2026Release notes →
12.3.6+security-04STABLE12/05/2026Release notes →
12.3.6+security-01STABLE26/03/2026Release notes →
12.3.5STABLE09/03/2026Release notes →
12.3.4STABLE24/02/2026Release notes →
12.3.3STABLE12/02/2026Release notes →
12.3.2STABLE27/01/2026Release notes →
12.3.2+security-01STABLE11/02/2026Release notes →
12.3.1STABLE16/12/2025Release notes →
12.3.0STABLE19/11/2025Release notes →
12.2.10STABLE23/06/2026Release notes →
12.2.9STABLE09/06/2026Release notes →
12.2.8STABLE26/03/2026Release notes →
12.2.8+security-04STABLE12/05/2026Release notes →
12.2.8+security-01STABLE25/03/2026Release notes →
12.2.7STABLE09/03/2026Release notes →
12.2.6STABLE24/02/2026Release notes →
12.2.5STABLE12/02/2026Release notes →
12.2.4STABLE27/01/2026Release notes →
12.2.4+security-01STABLE11/02/2026Release notes →
12.2.3STABLE16/12/2025Release notes →
12.2.2STABLE19/11/2025Release notes →
12.2.1STABLE21/10/2025Release notes →
12.2.1+security-01STABLE19/11/2025Release notes →
12.2.0STABLE24/09/2025Release notes →

Frequently asked questions

What is the latest version of Grafana?
Grafana 13.2.3, released 29/09/2026. patchletter checks the vendor's official source daily for new releases.
Where can I find the Grafana release notes?
The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
How do I get notified about new Grafana updates?
Tick Grafana off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.

An email as soon as a new Grafana version ships

We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.

Embed this badge

The badge shows the current Grafana version and keeps it up to date. Anyone may embed it, no account needed.

Grafana badge
[![Grafana](https://patchletter.com/badge/grafana.svg)](https://patchletter.com/en/software/grafana)
https://patchletter.com/badge/grafana.svg

Also available: ?v=eol (end of support) and ?v=cve (actively exploited).

Related tools in Monitoring & ITSM