Grafana OSS (12.3.0 to 12.4.10, 13.0.0 to 13.0.8, 13.1.0 to 13.1.5, 13.2.0 to 13.2.1)

Grafana OSS versions 12.x and 13.x contain a cross-site scripting (XSS) vulnerability (CVE-2026-76154) in the Geomap MapLibre component that could allow attackers to execute malicious scripts in a user's session.