What is GHSA-crvv-6w6h-cv34?

GHSA-crvv-6w6h-cv34 is a security advisory published by GitHub Security Advisories with Low severity. Grafana long dashboard title or panel name causes unresponsives

Which CVE IDs does GHSA-crvv-6w6h-cv34 cover?

GHSA-crvv-6w6h-cv34 covers the following CVE IDs: CVE-2025-1088. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-crvv-6w6h-cv34?

GHSA-crvv-6w6h-cv34 has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

Which products are affected by GHSA-crvv-6w6h-cv34?

GHSA-crvv-6w6h-cv34 affects 2 products, including: go/github.com/grafana/grafana:\u003e= 0.0.1-test, \u003c 11.6.2; go/github.com/grafana/grafana:\u003c 0.0.0-20250521211231-e0ba4b480954.

GHSA-crvv-6w6h-cv34LowCVSS 2.7

Grafana long dashboard title or panel name causes unresponsives

Vendor

GitHub Security Advisories

Published

June 18, 2025

Last Modified

June 18, 2025

🔗 CVE IDs covered (1)

CVE-2025-1088 →

📋 Description

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

🎯 Affected products2

go/github.com/grafana/grafana:>= 0.0.1-test, < 11.6.2
go/github.com/grafana/grafana:< 0.0.0-20250521211231-e0ba4b480954

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-1088
https://grafana.com/security/security-advisories/cve-2025-1088
https://github.com/advisories/GHSA-crvv-6w6h-cv34