Plan
archived
Grafana 12.4.11 patches four CVEs in observability stack
- Platform/SRE — Plan: Grafana is a standard observability component in Platform’s stack; four CVEs are patched in 12.4.11, but none appear in CISA KEV and EPSS scores are near zero, so schedule the upgrade this sprint rather than treating it as an emergency hotfix.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-12704 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-15815 — CISA KEV: not listed, EPSS 0.01 · CVE-2026-76154 — CISA KEV: not listed, EPSS 0.00
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.