Observability

Grafana: what changed

In the last 90 days, 12 summarized changes: 9 security advisories, 2 end-of-life notices, 1 releases. Stackdiff reads Grafana's own feeds (grafana.com) and writes two sentences per change with a link to the source; it never republishes release notes. Sources last checked .

Needs attention

Breaking changes, security advisories, end-of-life and license changes from the last 90 days, worst first.

12.4.10Securitymedium
12.4.10
13.0.8Securitymedium
13.0.8
13.1.5Securitymedium
13.1.5
13.2.1Securitymedium
13.2.1
13.2.0Securitymedium
13.2.0
13.0.7Securitymedium
13.0.7
12.4.9Securitymedium
12.4.9
12.3.11Securitymedium
12.3.11
13.1.4Securitymedium
13.1.4
13.0End of lifehigh
Grafana 13.0 reaches end of life on 2027-01-09
ActionPlan the upgrade before the date.
12.3End of lifehigh
Grafana 12.3 reached end of life on 2026-08-19
ActionPlan the upgrade before the date.

End of life

Support windows from endoflife.date. An entry appears the day a date enters the 120-day horizon.

CycleWhatPublished
13.0Grafana 13.0 reaches end of life on 2027-01-09
12.3Grafana 12.3 reached end of life on 2026-08-19

Latest changes

Newest first, every type. Releases and fixes sit below anything that can hurt you in the weekly brief; here they are in order.

News
Better context, smarter testing: How to give your AI coding agent direct access to k6 docs
News
Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability
News
From failed check to real user impact: Pairing Synthetic Monitoring and Frontend Observability in Grafana Cloud
News
Knowledge Graph as context for LLMs: demonstrating decisive RCA and faster production performance
13.2News
Grafana 13.2 release: easier ways to query and explore your data
News
How to scale Alloy as a central telemetry gateway: capacity planning, load testing, and production lessons
News
The Grafana AI SDK for Go: a shared foundation for building AI applications
News
How to measure and improve instrumentation quality for better full-stack observability
News
How to monitor Cypress tests with Grafana Cloud
News
Custom labels in Grafana Cloud Synthetic Monitoring: New updates for consistency and ease-of-use
13.0End of lifehigh
Grafana 13.0 reaches end of life on 2027-01-09
ActionPlan the upgrade before the date.
12.4.10Securitymedium
12.4.10
13.0.8Securitymedium
13.0.8
13.1.5Securitymedium
13.1.5
13.2.1Securitymedium
13.2.1
13.2.0Securitymedium
13.2.0
12.3End of lifehigh
Grafana 12.3 reached end of life on 2026-08-19
ActionPlan the upgrade before the date.
13.0.7Securitymedium
13.0.7
12.4.9Securitymedium
12.4.9
12.3.11Securitymedium
12.3.11
13.1.4Securitymedium
13.1.4
13.1.3Release
13.1.3
1.9.2-0.20260513165311-fb7336fc36c1Securitymedium
GHSA-wfhv-mj62-f5xh: Grafana: Users can generate Service Account tokens after permissions removal
1.9.2-0.20260513165311-fb7336fc36c1Securitymedium
GHSA-gxcp-jjxh-rwp4: Grafana: SQL Expressions Read File From Disk
1.9.2-0.20260325055210-3522153e07b4Securitymedium
GHSA-3q27-7qjq-p9c5: Grafana public dashboards disclose all direct mode datasources
1.9.2-0.20260323180334-daffe750de85Securitymedium
GHSA-7g92-g4vh-hp84: Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions
12.2.5Securitymedium
GHSA-cqp7-wf4c-3xgc: Grafana has a Cross-site Scripting issue
1.9.2-0.20251106142618-ca5d89812015Securitymedium
GHSA-w62r-7c53-fmc5: Grafana Incorrect Privilege Assignment vulnerability
1.9.2-0.20250521205822-0ba0b99665a9Securityhigh
GHSA-vqph-p5vc-g644: Grafana is vulnerable to XSS attacks through open redirects and path traversal
1.9.2-0.20250514160932-04111e9f2afdSecuritymedium
GHSA-46m5-8hpj-p5p5: Grafana's insecure DingDing Alert integration exposes sensitive information

Where Stackdiff reads Grafana

Only what the vendor publishes for machines. Excerpts are capped, summaries are our own two sentences, and every line links back.

Get Grafana changes in your Monday brief

Add Grafana and the rest of your stack; breaking changes and CVEs go out the moment they're seen, everything else on Monday.

Get your first brief

Other observability tools