p PatchFirst

CVE-2025-1088

CVE-2025-1088 · Very long unicode dashboard title or panel name can hang the frontend

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

CVSS 2.7 · Low · EPSS 0.5% · Fix available

Published
Updated

Stack: system · applications

Affected products and versions

  • grafana

    Versions
    • ≥ 0, < 11.6.2: Affected (semver)

    Update to 11.6.2

  • grafana Ubuntu:16.04:LTS

    Versions
    • 2.6.0+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →