Grafana security advisory (AV26-936)
Brief
Serial number: AV26-936 Date: September 18, 2026
As of September 17, 2026, Grafana is affected by vulnerabilities in the following product:
- Grafana OSS
- Version 12.3.0 to 12.4.10
- Version 13.0.0 to 13.08
- Version 13.1.0 to 13.1.5
- Version 13.2.0 to 13.2.1
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- Geomap MapLibre XSS
- Grafana Security Advisories
Grafana security advisory (AV26-936) - Canadian Centre for Cyber Security