grafana

v11.6.15 Security

This release includes 5 security fixes for security teams reviewing exposed deployments.

Published 1mo Dashboards & Visualization

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 5 known CVEs

Topics

alerting analytics business-intelligence web data-visualization elasticsearch

+7 more

go grafana influxdb prometheus monitoring mysql postgresql

ReleasePort's take

Moderate signal

editorial:auto 1mo

Grafana v11.6.15 patches CVE-2026-33382 and updates Docker Alpine to 3.23.4, Go runtime to 1.26.3, and fixes dashboard panel refresh bugs.

Why it matters: CVE-2026-33382 (severity 95) is patched; upgrading resolves the vulnerability and benefits from updated dependencies. Deploy v11.6.15 promptly.

Summary

AI summary

Updates Bug fixes, Features and enhancements, and https://github.com/grafana/grafana/pull/123032 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Patches CVE-2026-33382 Patches CVE-2026-33382 Source: llm_adapter@2026-06-09 Confidence: high	—
Dependency	Critical	Updates Docker Alpine base image to 3.23.4 Updates Docker Alpine base image to 3.23.4 Source: llm_adapter@2026-06-09 Confidence: low	—
Dependency	Critical	Updates Go runtime version to 1.26.3 Updates Go runtime version to 1.26.3 Source: llm_adapter@2026-06-09 Confidence: low	—
Bugfix	Medium	Fixes dashboard panels not updating on time‑range change with stale upstreams Fixes dashboard panels not updating on time‑range change with stale upstreams Source: llm_adapter@2026-06-09 Confidence: low	—

Full changelog

Download page
What's new highlights

Features and enhancements

Docker: Bump Alpine-based images to 3.23.4 #123032, @Proximyst
Go: Update version to 1.26.3 #124459, @macabu

Bug fixes

DashboardDS: Fix Mixed panels not updating on time-range change with stale upstreams #124890, @ivanortegaalba
Security: CVE-2026-33382
Security: CVE-2026-42127
Security: CVE-2026-42129
Security: CVE-2026-10601
Security: CVE-2026-8609

Security Fixes

CVE-2026-33382
CVE-2026-42127
CVE-2026-42129
CVE-2026-10601
CVE-2026-8609

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track grafana

Get notified when new releases ship.

About grafana

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.