GitHub Advisoryadvisory · Go

GHSA-crvv-6w6h-cv34 Grafana long dashboard title or panel name causes unresponsives

LOW Published 2025-06-18 Modified 2025-06-18 Official page ↗
Aliases
CVE-2025-1088
Ecosystem
Go
Packages
github.com/grafana/grafana
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-20
Reviewed
2025-06-18

Affected packages

• Go github.com/grafana/grafana: >= 0.0.1-test, < 11.6.2 → fixed in 11.6.2 • Go github.com/grafana/grafana: < 0.0.0-20250521211231-e0ba4b480954 → fixed in 0.0.0-20250521211231-e0ba4b480954

Description

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

Related

Alias · CVE (1)

  • CVE-2025-1088 In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References