CGA-xrw9-r5f2-2334

CVE-2025-1088 affects Grafana versions before 11.6.2 due to improper input validation of dashboard/panel titles causing browser hangs. However, Grafana 10.4.19 already contains the upstream fix implemented in commit 44c471d10ca1d7c7035f648d3278aacbc1c99507. Evidence: DashboardGrid.tsx:114 contains 'panel.title = panel.title?.substring(0, 5000);' and transformSaveModelToScene.ts:435 contains 'title: panel.title?.substring(0, 5000),'. The vulnerable code (unlimited panel title length) is not included in this package version.