Impact Score: 5/10
Grafana: 13.2.4
Source available โ automated, not human-reviewed
Component: grafana ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Grafana v13.2.4. Source highlight: Download page
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (6)
- **Alerting:** Strip sensitive headers from oauth2 cross-host redirects #134433, @JacobsonMT
- **Dashboard:** Fall back when collection deletion is unsupported #134224, @bestend
- **Git Sync:** Clarify repository links for pure Git #134253, @ferruvich
- **Provisioning:** Allow resource previews in unsynced folders #134391, [@grafana-writer[bot]](https://github.com/grafana-writer[bot])
- **Provisioning:** Reject invalid resource names before API calls #133776, [@grafana-writer[bot]](https://github.com/grafana-writer[bot])
- **Provisioning:** Show last checked time in Pull status #134483, @ferruvich
๐ง Bug Fixes & Patches (5)
- Security: Fix CVE-2026-15577
- Security: Fix CVE-2026-33374
- Security: Fix CVE-2026-93294
- Security: Fix CVE-2026-95502
- **CVE-2026-92539:** IAM: Fix: SCIM (Enterprise)
๐ View Raw Release Notes (Original Developer Log)
[Download page](https://grafana.com/grafana/download/13.2.4)
[What's new highlights](https://grafana.com/docs/grafana/latest/whatsnew/)
### Security
- Security: Fix CVE-2026-15577
- Security: Fix CVE-2026-33374
- Security: Fix CVE-2026-93294
- Security: Fix CVE-2026-95502
### Features and enhancements
- **Alerting:** Strip sensitive headers from oauth2 cross-host redirects [#134433](https://github.com/grafana/grafana/pull/134433), [@JacobsonMT](https://github.com/JacobsonMT)
- **Dashboard:** Fall back when collection deletion is unsupported [#134224](https://github.com/grafana/grafana/pull/134224), [@bestend](https://github.com/bestend)
- **Git Sync:** Clarify repository links for pure Git [#134253](https://github.com/grafana/grafana/pull/134253), [@ferruvich](https://github.com/ferruvich)
- **Provisioning:** Allow resource previews in unsynced folders [#134391](https://github.com/grafana/grafana/pull/134391), [@grafana-writer[bot]](https://github.com/grafana-writer[bot])
- **Provisioning:** Reject invalid resource names before API calls [#133776](https://github.com/grafana/grafana/pull/133776), [@grafana-writer[bot]](https://github.com/grafana-writer[bot])
- **Provisioning:** Show last checked time in Pull status [#134483](https://github.com/grafana/grafana/pull/134483), [@ferruvich](https://github.com/ferruvich)
- **Provisioning:** Skip previews for pull requests from forks [#133799](https://github.com/grafana/grafana/pull/133799), [@ferruvich](https://github.com/ferruvich)
- **Provisioning:** Stop PR previews when refs disappear [#133855](https://github.com/grafana/grafana/pull/133855), [@ferruvich](https://github.com/ferruvich)
- **Provisioning:** Support legacy paths and diagnose missing source annotations [#133779](https://github.com/grafana/grafana/pull/133779), [@grafana-writer[bot]](https://github.com/grafana-writer[bot])
- **Provisioning:** write terminal sync status back to repository on early sync-job failures and Respect Git Sync polling intervals after unchanged refs [#134478](https://github.com/grafana/grafana/pull/134478), [@mustafasencer](https://github.com/mustafasencer)
### Bug fixes
- **CVE-2026-92539:** IAM: Fix: SCIM (Enterprise)