Vulnerability Database · npm · Package report
@grafana/sql: vulnerability history, versions and safety
@grafana/sql is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on @grafana/sql 13.2.4 i
Updated on 23 Oct 2026
Good news: 13.2.4, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Niche
- Community Active
What to do: Stay on 13.2.4 or newer. This can change: a vulnerability disclosed tomorrow can affect 13.2.4 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 13.2.4 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 77,421 i
- OpenSSF scorecard 7/10 i
- Last release this month i
- Licence AGPL-3.0-only i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for @grafana/sql, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 13.2.4 13 Oct 2026
- 13.0.11 13 Oct 2026
- 13.1.8 13 Oct 2026
- 13.2.3 29 Sep 2026
- 13.1.7 29 Sep 2026
- 13.0.10 29 Sep 2026
- 13.2.2 15 Sep 2026
- 13.1.6 15 Sep 2026
- 13.0.9 15 Sep 2026
- 13.2.1 01 Sep 2026
- 13.1.5 01 Sep 2026
- 13.0.8 01 Sep 2026
- 13.1.4 18 Aug 2026
- 13.0.7 18 Aug 2026
- 13.2.0 18 Aug 2026
- 13.1.3 07 Aug 2026
- 13.0.6 07 Aug 2026
- 13.1.2 04 Aug 2026
- 13.0.5 04 Aug 2026
- 13.0.4 21 Jul 2026
- 13.1.1 21 Jul 2026
- 13.2.0-28985753600 09 Jul 2026
- 13.2.0-28908703397 08 Jul 2026
- 13.2.0-28833310859 07 Jul 2026
- 13.2.0-28760681610 06 Jul 2026
- 13.2.0-28630731574 03 Jul 2026
- 13.2.0-28557667463 02 Jul 2026
- 13.2.0-28485856927 01 Jul 2026
- 13.2.0-28412642318 30 Jun 2026
- 13.2.0-28341960884 29 Jun 2026
- 13.2.0-28210054037 26 Jun 2026
- 13.2.0-28139414294 25 Jun 2026
- 13.2.0-28067222854 24 Jun 2026
- 13.0.3 23 Jun 2026
- 13.1.0 23 Jun 2026
- 13.1.0-27994349655 23 Jun 2026
- 13.1.0-27923201854 22 Jun 2026
- 13.1.0-27798918106 19 Jun 2026
- 13.1.0-27729613434 18 Jun 2026
- 13.1.0-27658423959 17 Jun 2026
- 13.1.0-27586898815 16 Jun 2026
- 13.1.0-27517847252 15 Jun 2026
- 13.1.0-27387410414 12 Jun 2026
- 13.1.0-27316398859 11 Jun 2026
- 13.1.0-27245746010 10 Jun 2026
- 13.1.0-27176567230 09 Jun 2026
- 13.1.0-27110140411 08 Jun 2026
- 13.1.0-26988652987 05 Jun 2026
- 13.1.0-26923194055 04 Jun 2026
- 13.1.0-26857288048 03 Jun 2026
- 13.0.2 02 Jun 2026
- 13.1.0-26791560375 02 Jun 2026
- 13.1.0-26729591522 01 Jun 2026
- 13.1.0-26657291204 29 May 2026
- 13.1.0-25893932881 15 May 2026
- 13.1.0-25858739282 14 May 2026
- 13.1.0-25834970704 14 May 2026
- 13.1.0-25771031703 13 May 2026
- 13.1.0-25644485979 11 May 2026
- 13.1.0-25530058790 08 May 2026
- 13.1.0-25469333600 07 May 2026
- 13.1.0-25410206825 06 May 2026
- 13.1.0-25351545110 05 May 2026
- 13.1.0-25295570271 04 May 2026
- 13.1.0-25196703233 01 May 2026
- 13.1.0-25141410377 30 Apr 2026
- 13.1.0-25085186667 29 Apr 2026
- 13.1.0-25027462778 28 Apr 2026
- 13.1.0-24866141508 24 Apr 2026
- 13.1.0-24810162751 23 Apr 2026
- 13.1.0-24782475120 22 Apr 2026
- 13.1.0-24782413594 22 Apr 2026
- 13.1.0-24782184800 22 Apr 2026
- 13.1.0-24779889232 22 Apr 2026
- 13.1.0-24779639466 22 Apr 2026
- 13.1.0-24779500085 22 Apr 2026
- 13.1.0-24779400919 22 Apr 2026
- 13.1.0-24779286268 22 Apr 2026
- 13.1.0-24779284961 22 Apr 2026
- 13.1.0-24777185528 22 Apr 2026
- 13.1.0-24776938573 22 Apr 2026
- 13.1.0-24776882246 22 Apr 2026
- 13.1.0-24776549627 22 Apr 2026
- 13.1.0-24776479551 22 Apr 2026
- 13.1.0-24775860663 22 Apr 2026
- 13.1.0-24773365374 22 Apr 2026
- 13.1.0-24772062735 22 Apr 2026
- 13.1.0-24772061254 22 Apr 2026
- 13.1.0-24771023598 22 Apr 2026
- 13.1.0-24769515830 22 Apr 2026
- 13.1.0-24768981023 22 Apr 2026
- 13.1.0-24767876364 22 Apr 2026
- 13.1.0-24767818066 22 Apr 2026
- 13.1.0-24767659448 22 Apr 2026
- 13.1.0-24767312402 22 Apr 2026
- 13.1.0-24767261680 22 Apr 2026
- 13.1.0-24766365695 22 Apr 2026
- 13.1.0-24765808374 22 Apr 2026
- 13.1.0-24765254652 22 Apr 2026
- 13.1.0-24764098254 22 Apr 2026
- 13.1.0-24763014532 22 Apr 2026
- 13.1.0-24754019920 22 Apr 2026
- 13.1.0-24753821026 22 Apr 2026
- 13.1.0-24751918662 21 Apr 2026
- 13.1.0-24747827365 21 Apr 2026
- 13.1.0-24745764018 21 Apr 2026
- 13.1.0-24744286217 21 Apr 2026
- 13.1.0-24743221722 21 Apr 2026
- 13.1.0-24742934288 21 Apr 2026
- 13.1.0-24742545249 21 Apr 2026
- 13.1.0-24742007488 21 Apr 2026
- 13.1.0-24740127437 21 Apr 2026
- 13.1.0-24740095886 21 Apr 2026
- 13.1.0-24739996958 21 Apr 2026
- 13.1.0-24739891530 21 Apr 2026
- 13.1.0-24736628769 21 Apr 2026
- 13.1.0-24735181926 21 Apr 2026
- 13.1.0-24733864732 21 Apr 2026
- 13.1.0-24731944351 21 Apr 2026
- 13.1.0-24731224666 21 Apr 2026
| Version | Released | Vulert vulnerabilities | Licence | Fix published | Details |
|---|---|---|---|---|---|
| 13.2.4 | 13 Oct 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.11 | 13 Oct 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.8 | 13 Oct 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.3 | 29 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.7 | 29 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.10 | 29 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.2 | 15 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.6 | 15 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.9 | 15 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.1 | 01 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.5 | 01 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.8 | 01 Sep 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.4 | 18 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.7 | 18 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0 | 18 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.3 | 07 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.6 | 07 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.2 | 04 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.5 | 04 Aug 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.4 | 21 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.1 | 21 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28985753600 | 09 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28908703397 | 08 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28833310859 | 07 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28760681610 | 06 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28630731574 | 03 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28557667463 | 02 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28485856927 | 01 Jul 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28412642318 | 30 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28341960884 | 29 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28210054037 | 26 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28139414294 | 25 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.2.0-28067222854 | 24 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.3 | 23 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0 | 23 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27994349655 | 23 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27923201854 | 22 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27798918106 | 19 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27729613434 | 18 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27658423959 | 17 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27586898815 | 16 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27517847252 | 15 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27387410414 | 12 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27316398859 | 11 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27245746010 | 10 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27176567230 | 09 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-27110140411 | 08 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-26988652987 | 05 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-26923194055 | 04 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-26857288048 | 03 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.0.2 | 02 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-26791560375 | 02 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-26729591522 | 01 Jun 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-26657291204 | 29 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25893932881 | 15 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25858739282 | 14 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25834970704 | 14 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25771031703 | 13 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25644485979 | 11 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25530058790 | 08 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25469333600 | 07 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25410206825 | 06 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25351545110 | 05 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25295570271 | 04 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25196703233 | 01 May 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25141410377 | 30 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25085186667 | 29 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-25027462778 | 28 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24866141508 | 24 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24810162751 | 23 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24782475120 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24782413594 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24782184800 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24779889232 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24779639466 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24779500085 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24779400919 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24779286268 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24779284961 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24777185528 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24776938573 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24776882246 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24776549627 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24776479551 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24775860663 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24773365374 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24772062735 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24772061254 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24771023598 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24769515830 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24768981023 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24767876364 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24767818066 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24767659448 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24767312402 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24767261680 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24766365695 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24765808374 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24765254652 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24764098254 | 22 Apr 2026 | none | AGPL-3.0-only | — | Details → |
| 13.1.0-24763014532 | 22 Apr 2026 | none | — | — | Details → |
| 13.1.0-24754019920 | 22 Apr 2026 | none | — | — | Details → |
| 13.1.0-24753821026 | 22 Apr 2026 | none | — | — | Details → |
| 13.1.0-24751918662 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24747827365 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24745764018 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24744286217 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24743221722 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24742934288 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24742545249 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24742007488 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24740127437 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24740095886 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24739996958 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24739891530 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24736628769 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24735181926 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24733864732 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24731944351 | 21 Apr 2026 | none | — | — | Details → |
| 13.1.0-24731224666 | 21 Apr 2026 | none | — | — | Details → |
The newest 120 of 1,580 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for @grafana/sql
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About @grafana/sql
Is @grafana/sql safe to use?
Vulert has no vulnerabilities on record for @grafana/sql in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is @grafana/sql's Vulert package health score?
Vulert scores @grafana/sql 86/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of @grafana/sql affected?
No. 13.2.4, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does @grafana/sql have?
0 vulnerabilities are recorded for @grafana/sql in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new @grafana/sql vulnerabilities disclosed?
0 vulnerabilities were recorded for @grafana/sql in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of @grafana/sql are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor @grafana/sql for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @grafana/sql version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.