Plan archived

Grafana 13.2.2 patches three low-EPSS CVEs

2026-09-21 17:51 UTC · Releases: grafana · read the source ↗ #grafana #observability #security-patch

Platform/SRE — Plan: Grafana is a standard part of the observability stack platform teams own; 13.2.2 patches three CVEs (EPSS ≤ 0.01, none KEV-listed), so no emergency but schedule an upgrade of Grafana instances this sprint to stay current on security fixes.
CI/CD — Skip
Leader — Skip
Signals: CVE-2026-15815 — CISA KEV: not listed, EPSS 0.01 · CVE-2026-76154 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-79656 — CISA KEV: not listed, EPSS n/a

This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.