Impact Score: 5/10
Grafana: 11.5.3+security-01
Source available — automated, not human-reviewed
Component: grafana · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Grafana v11.5.3+security-01. Source highlight: Download page
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (3)
- **Chore:** Bump Go to 1.23.7 #101581, @macabu
- **Chore:** Bump Go to 1.23.7 (Enterprise)
- **Chore:** Update CVE-affected dependencies #102709, @grambbledook
🔧 Bug Fixes & Patches (6)
- **Alerting:** Fix token-based Slack image upload to work with channel names #101078, @JacobsonMT
- **Auth:** Fix AzureAD config UI's ClientAuthentication dropdown #100869, @mgyongyosi
- **Dashboard:** Fix the unintentional time range and variables updates on saving #101671, @harisrozajac
- **Dashboards:** Fix missing `v/e/i` keybindings to return back to dashboard #102365, @mdvictor
- **InfluxDB:** Improve handling of template variables contained in regular expressions (InfluxQL) #100977, @aangelisc
- **LDAP test:** Fix page crash #102683, @ashharrison90
📄 View Raw Release Notes (Original Developer Log)
[Download page](https://grafana.com/grafana/download/11.5.3+security-01)
[What's new highlights](https://grafana.com/docs/grafana/latest/whatsnew/)
### Features and enhancements
- **Chore:** Bump Go to 1.23.7 [#101581](https://github.com/grafana/grafana/pull/101581), [@macabu](https://github.com/macabu)
- **Chore:** Bump Go to 1.23.7 (Enterprise)
- **Chore:** Update CVE-affected dependencies [#102709](https://github.com/grafana/grafana/pull/102709), [@grambbledook](https://github.com/grambbledook)
### Bug fixes
- **Alerting:** Fix token-based Slack image upload to work with channel names [#101078](https://github.com/grafana/grafana/pull/101078), [@JacobsonMT](https://github.com/JacobsonMT)
- **Auth:** Fix AzureAD config UI's ClientAuthentication dropdown [#100869](https://github.com/grafana/grafana/pull/100869), [@mgyongyosi](https://github.com/mgyongyosi)
- **Dashboard:** Fix the unintentional time range and variables updates on saving [#101671](https://github.com/grafana/grafana/pull/101671), [@harisrozajac](https://github.com/harisrozajac)
- **Dashboards:** Fix missing `v/e/i` keybindings to return back to dashboard [#102365](https://github.com/grafana/grafana/pull/102365), [@mdvictor](https://github.com/mdvictor)
- **InfluxDB:** Improve handling of template variables contained in regular expressions (InfluxQL) [#100977](https://github.com/grafana/grafana/pull/100977), [@aangelisc](https://github.com/aangelisc)
- **LDAP test:** Fix page crash [#102683](https://github.com/grafana/grafana/pull/102683), [@ashharrison90](https://github.com/ashharrison90)
- **Org redirection:** Fix linking between orgs [#102089](https://github.com/grafana/grafana/pull/102089), [@ashharrison90](https://github.com/ashharrison90)
- **Security:** Fix CVE-2025-3454
- **Security:** Fix CVE-2025-2703