GO-2026-5423 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana, grafana-fips...

CVE-2025-29509

Jan v0.5.14 and before is vulnerable to remote code execution RCE when the user clicks on a rendered link in the conversation, due to opening external website in the app and the exposure of electronAPI, with a lack of filtering of URL when calling shell.openExternal...