{"id":"CVE-2025-1088","aliases":["GHSA-crvv-6w6h-cv34","GO-2025-3766"],"url":"https://o3.security/vulnerability/CVE-2025-1088","summary":"Very long unicode dashboard title or panel name can hang the frontend","details":"In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana.\nThis issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.","published":"2025-06-20T05:44:52.153Z","modified":"2025-07-28T20:42:04.884871Z","cvss":null,"epss":{"score":0.00434,"percentile":0.37009,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Bitnami","name":"grafana","fixedVersion":"11.6.2"}],"fix":null,"references":[{"type":"WEB","url":"https://grafana.com/security/security-advisories/cve-2025-1088/"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1088"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-07-28T20:42:04.884871Z"}}