Synced 27 Oct 2026 13:49 UTC Account

Is Grafana 10.4.19+security-01 patched?

Grafana Labs · cycle 10.4 · end of life · Official site ↗
10.4.19+security-0135/100End of life

Current stable (13.2.4): 100/100

Minimum safe version12.4.4

10.4.19+security-01 has 8 open critical-or-high vulnerabilities. Run 12.4.4 or later to clear them. See what 12.4.4 fixes →

Upgrade impact: Major upgrade (2 major versions). Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.

Health score35/100
Open issues16
Exploited now0
Cycle 10.4 EOL2025-06-05
Latest release13.2.4

Summary iPlain-English security status for Grafana 10.4.19+security-01, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Grafana 10.4.19+security-01 is part of the 10.4 release line. 16 known vulnerabilities affect it. The minimum safe version is 12.4.4 — upgrade to it or later to clear the open critical/high issues. The 10.4 line reached end-of-life on 2025-06-05, so it no longer receives security patches. The latest supported Grafana release is 13.2.4.

Known issues affecting 10.4.19+security-01

Exploited first, then by exploitation probability.

CVE-2026-27876 CRITICAL EPSS 2% → fixed in 12.4.0 CVE-2026-27880 HIGH EPSS 1% → fixed in 12.4.0 CVE-2026-21721 HIGH EPSS 1% → fixed in 12.2.3 CVE-2026-21720 HIGH EPSS 1% → fixed in 12.2.3 CVE-2026-42127 HIGH EPSS 0% → see advisory CVE-2026-14199 HIGH EPSS 0% → fixed in 13.2.0 CVE-2026-28376 MEDIUM EPSS 0% → fixed in 12.4.3 CVE-2026-28383 MEDIUM EPSS 0% → fixed in 12.4.3 CVE-2026-33378 MEDIUM EPSS 0% → fixed in 12.4.3 CVE-2026-33376 HIGH EPSS 0% → fixed in 12.4.3 CVE-2026-28379 MEDIUM EPSS 0% → fixed in 12.4.3 CVE-2025-12141 MEDIUM EPSS 0% → see advisory CVE-2026-28380 MEDIUM EPSS 0% → fixed in 12.4.3 CVE-2026-33377 HIGH EPSS 0% → fixed in 12.4.3 CVE-2026-21727 LOW EPSS 0% → fixed in 12.3.3 CVE-2026-28374 MEDIUM EPSS 0% → fixed in 12.4.3

Other Grafana versions

Check another release line of Grafana.

Grafana 13.2.4Grafana 13.1.8Grafana 13.0.11Grafana 12.4.13Grafana 12.3.11Grafana 12.2.10Grafana 12.1.10+security-01Grafana 12.0.10Grafana 11.6.16Grafana 11.5.10Grafana 11.4.8Grafana 11.3.9Grafana 11.2.10+security-01Grafana 11.1.13Grafana 11.0.11Grafana 10.3.12Grafana 10.2.9Grafana 10.1.10Grafana 10.0.13Grafana 9.5.21Grafana 9.4.17Grafana 9.3.16Grafana 9.2.20Grafana 9.1.8Grafana 9.0.9Grafana 8.5.27Grafana 7.5.17Grafana 6.7.6

Frequently asked

Is Grafana 10.4.19+security-01 patched?

Grafana 10.4.19+security-01 is end-of-life and no longer receives security patches. Move to 13.2.4.

What version should I upgrade Grafana 10.4.19+security-01 to?

Upgrade Grafana 10.4.19+security-01 to at least 12.4.4 to clear its 8 open critical-or-high vulnerabilities.

When does Grafana 10.4 reach end-of-life?

Grafana 10.4 reached end-of-life on 2025-06-05 and no longer receives security patches.

What is the latest version of Grafana?

The latest supported Grafana release is 13.2.4.

Is Grafana 10.4.19+security-01 still receiving security updates?

No — Grafana 10.4.19+security-01 is on the 10.4 line, which reached end-of-life on 2025-06-05 and no longer receives security updates. Upgrade to 13.2.4 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Grafana Labs's official advisory before you patch or upgrade — Grafana official site ↗