Grafana ↗
Summary iPlain-English security verdict for Grafana, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.
Grafana's security status could not be assessed at the last sync — vulnerability data was unavailable.
Disclosure trend iNew CVEs published for Grafana each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.
Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.
No urgent unpatched issues identified. ✓
Get alerted about Grafana
Be emailed the moment Grafana gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.
We email only on real events for Grafana — no marketing, no sharing, and we never know what you run. Track your whole stack →
Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.
How long each Grafana release line is supported — and when it sunsets. Select a line for its full report.
Full Grafana end-of-life dates & support timeline →
13.0 latest 13.0.2 Supported until 2027-01-0913.0.2 → 12.4 latest 12.4.4 Supported until 2027-05-2412.4.4 → 12.3 latest 12.3.7 Supported until 2026-08-1912.3.7 → 12.2 latest 12.2.9 Supported until 2026-06-2312.2.9 → 12.1 latest 12.1.10+security-01 End of life ended 2026-04-2212.1.10+security-01 → 12.0 latest 12.0.10 End of life ended 2026-02-0512.0.10 → 11.6 latest 11.6.15 Supported until 2026-06-2511.6.15 → 11.5 latest 11.5.10 End of life ended 2025-10-2811.5.10 → 11.4 latest 11.4.8 End of life ended 2025-09-0511.4.8 → 11.3 latest 11.3.9 End of life ended 2025-07-2211.3.9 → See all upcoming end-of-life dates →Frequently asked
Is Grafana safe and patched?
Grafana's security status could not be assessed at the last sync — vulnerability data was unavailable.
What should I do about Grafana now?
Upgrade Grafana to the latest supported release (13.0.2) or later and apply available security updates, then confirm against Grafana Labs's official advisory.
When does Grafana reach end-of-life?
The latest supported Grafana release is 13.0.2. After end-of-life a release no longer receives security patches.
Which versions of Grafana are still receiving security updates?
Supported Grafana release lines (latest 13.0.2): 13.0, 12.4, 12.3, 12.2, 11.6. End-of-life releases no longer receive security patches.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Grafana Labs's official advisory before you patch or upgrade — Grafana official site ↗