Grafana lists ten CVEs in 13.3.0 and fixes an eleventh
Grafana shipped 12.4.14, 13.2.5 and 13.3.0 on 27 October with security lists that do not match: ten CVEs in 13.3.0's security section plus an eleventh fixed in its changelog, four in 13.2.5, three in 12.4.14. The collected records score 4.3 to 6.5, all Medium, and none is Critical.