Grafana Labs has released new versions 9.2.4 and 8.5.15 to address critical and moderate security vulnerabilities identified as CVE-2022-39328, CVE-2022-39307, and CVE-2022-39306. These updates resolve issues such as privilege escalation due to a race condition in HTTP context creation, vulnerability from using invitation links to sign up with arbitrary usernames or email addresses, and a username enumeration risk during password reset processes. Users are urged to upgrade their Grafana installations to protect against these vulnerabilities, with appropriate patches already applied to Grafana Cloud and coordinated with cloud providers like Amazon and Azure. Grafana Labs encourages users to report any security vulnerabilities via their dedicated security email and offers security announcements and updates through their blog and RSS feed.