Unsupported Software Findernotice of vendor support

Grafana end of life dates

The support dates the endoflife.date record (community-maintained) holds for Grafana, read on 30 Sep 2026: when security support ends for each version (cycle), when active support ends, and extended support where the record shows it. Below them, what Cyber Essentials, the Essential Eight, CIS Controls v8, PCI DSS and NIST SP 800-53 ask of a version past its end.

Oldest version still in support
12.4, security support to 24 May 2027
Next end date
13.0, security support ends 9 Jan 2027
Vendor's own notice
no vendor policy link in the record; each version below links its own notice where the record carries one, and the vendor notice is authoritative
Record
Grafana
Kind
server application
Versions in the record
29
Versions past vendor support
25
Essential Eight class
an application outside the priority classes: Patch applications asks for its removal once no longer supported at ML3; at ML1 and ML2 no held Essential Eight clause turns on it.
Source
endoflife.date/grafana, community-maintained, MIT licence, read 30 Sep 2026; sources

Grafana versions and their support dates

as at 30 Sep 2026
CycleReleasedActive support endsSecurity support endsExtended support endsOn the read dateVendor notice
13.218 Aug 2026ended, date not published18 May 2027none in the recordsupportednone in the record
13.123 Jun 202618 Aug 202620 Mar 2027none in the recordsecurity fixes onlynone in the record
13.014 Apr 202622 Jun 20269 Jan 2027none in the recordsecurity fixes onlynone in the record
12.424 Feb 202617 Apr 202624 May 2027none in the recordsecurity fixes onlynone in the record
12.319 Nov 202524 Feb 202619 Aug 2026none in the recordpast vendor supportnone in the record
12.223 Sep 202519 Nov 202523 Jun 2026none in the recordpast vendor supportnone in the record
12.122 Jul 202523 Sep 202522 Apr 2026none in the recordpast vendor supportnone in the record
12.05 May 202522 Jul 20255 Feb 2026none in the recordpast vendor supportnone in the record
11.625 Mar 20255 May 202525 Jun 2026none in the recordpast vendor supportnone in the record
11.528 Jan 202525 Mar 202528 Oct 2025none in the recordpast vendor supportnone in the record
11.45 Dec 202428 Jan 20255 Sep 2025none in the recordpast vendor supportnone in the record
11.322 Oct 20245 Dec 202422 Jul 2025none in the recordpast vendor supportnone in the record
11.227 Aug 202422 Oct 202427 May 2025none in the recordpast vendor supportnone in the record
11.125 Jun 202427 Aug 202423 Apr 2025none in the recordpast vendor supportnone in the record
11.014 May 202421 Jun 202414 Feb 2025none in the recordpast vendor supportnone in the record
10.45 Mar 202413 May 20245 Jun 2025none in the recordpast vendor supportnone in the record
10.323 Jan 20246 Mar 202423 Oct 2024none in the recordpast vendor supportnone in the record
10.224 Oct 202323 Jan 202424 Jul 2024none in the recordpast vendor supportnone in the record
10.123 Aug 202324 Oct 202323 Jan 2024none in the recordpast vendor supportnone in the record
10.09 Jun 202323 Aug 202324 Oct 2023none in the recordpast vendor supportnone in the record
9.56 Apr 20239 Jun 202314 May 2024none in the recordpast vendor supportnone in the record
9.427 Feb 20236 Apr 20239 Jun 2023none in the recordpast vendor supportnone in the record
9.329 Nov 202227 Feb 20236 Apr 2023none in the recordpast vendor supportnone in the record
9.211 Oct 202229 Nov 202227 Feb 2023none in the recordpast vendor supportnone in the record
9.116 Aug 202211 Oct 202229 Nov 2022none in the recordpast vendor supportnone in the record
9.013 Jun 202216 Aug 202211 Oct 2022none in the recordpast vendor supportnone in the record
88 Jun 202113 Jun 20229 Jun 2023none in the recordpast vendor supportnone in the record
715 May 20208 Jun 202114 Jun 2022none in the recordpast vendor supportnone in the record
625 Feb 201915 May 20208 Jun 2021none in the recordpast vendor supportnone in the record

A version this table does not list is not in the record: the finder reads it as unknown, never supported. The dates are the record's own; nothing here states a date the record does not hold.

What the schemes ask of a version past its end

Cyber Essentials
software on in-scope devices licensed and supported by the vendor, meaning it still receives security updates; unsupported software removed or segregated (SU.1, SU.4). Cyber Essentials Plus: removed, or isolated with compensating controls (PM-02).
Essential Eight
An application outside the priority classes: Patch applications asks for its removal once no longer supported at ML3; at ML1 and ML2 no held Essential Eight clause turns on it.
CIS Controls v8, Safeguard 2.2
only software that still receives vendor support may be marked authorised; unsupported software kept for the mission needs a recorded exception with compensating controls and the acceptance of the remaining risk; support status checked at least monthly.
PCI DSS 12.3.4
hardware and software reviewed at least every 12 months: that vendors still supply timely security fixes, end-of-life announcements documented, and a remediation plan for outdated technology approved by senior management.
NIST SP 800-53 SA-22
system components replaced when support is no longer available from the developer, vendor or manufacturer, or alternative sources of continued support provided.

See the specimen list runCheck your own list