Grafana 12.4.4
Release 12.4.4 includes enhancements to dashboard browsing and zooming, dependency updates (Alpine 3.23.4, Go 1.26.3), improved error handling for library panels and plugins, bug fixes across alerting, dashboards, Jaeger, and PostgreSQL, and addresses multiple security vulnerabilities.
Download page
What's new highlights
Features and enhancements
- Browse dashboards: Make elements visible and flow better when zoomed #120678, @aocenas
- Docker: Bump Alpine-based images to 3.23.4 #123027, @Proximyst
- Go: Update version to 1.26.3 #124456, @macabu
- Graphite: Strip tagged path from
tags.namewhenaliasSubwrapping is detected #122619, @adamyeats - LibraryPanels: Return 403 instead of 500 for insufficient permissions #123470, @MissingRoberto
- Plugins: Sanitise header values to printable ASCII for gRPC compatibility #122474, @adamyeats
Bug fixes
- Alerting: Fix AlertManagerPicker visibility to check Alertmanager datasources #124073, @konrad147
- Alerting: Treat not found error when fetching plugins as not installed #122989, @rodrigopk
- DashboardDS: Fix Mixed panels not updating on time-range change with stale upstreams #124893, @ivanortegaalba
- Jaeger: Fix log event timestamp unit conversion in trace view #123711, @ktw4071
- PostgreSQL: Allow sql_engine to return results for EXPLAIN queries #123245, @sdague
- Security: CVE-2026-9029
- Security: CVE-2026-33382
- Security: CVE-2026-42127
- Security: CVE-2026-42129
- Security: CVE-2026-10601
- Security: CVE-2026-8609
- Security: CVE-2026-8595
Source: original entry ↗
More from Grafana
Follow Grafana to get its new changes in your feed and email digest.
Grafana 12.4.13
This release includes multiple security vulnerability fixes (CVE-2026-15577, CVE-2026-33374, CVE-2026-93294, and CVE-2026-92539), an enhancement to strip sensitive headers from OAuth2 cross-host redirects in alerting, and improved dashboard collection deletion handling.
Grafana 13.1.8
This release includes four security fixes addressing CVEs, an improvement to strip sensitive headers from OAuth2 cross-host redirects in alerting, and a fallback enhancement for dashboard collection deletion.
Grafana 13.0.11
Grafana 13.0.11 includes security patches for four CVEs, improvements to alerting with OAuth2 header stripping and dashboard collection deletion fallback, and an IAM SCIM endpoint fix.