LOW2.7

GHSA-crvv-6w6h-cv34

Grafana long dashboard title or panel name causes unresponsives

Quick fix

GHSA-crvv-6w6h-cv34 — github.com/grafana/grafana: upgrade to the fixed version with the command below.

go get github.com/grafana/grafana@v11.6.2

Details

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/grafana/grafana

Introduced in: 0.0.1-testFixed in: 11.6.2

Fixgo get github.com/grafana/grafana@v11.6.2

Go/github.com/grafana/grafana

Introduced in: 0Fixed in: 0.0.0-20250521211231-e0ba4b480954

Fixgo get github.com/grafana/grafana@v0.0.0-20250521211231-e0ba4b480954

References

https://nvd.nist.gov/vuln/detail/CVE-2025-1088[ADVISORY]
https://github.com/grafana/grafana[PACKAGE]
https://grafana.com/security/security-advisories/cve-2025-1088[WEB]