Login Request a demo
CH
Product
chartbrew
by chartbrew · last CVE Sep 21, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 2High 10Medium 7Low 0
Severity
All severities19Critical2High10Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add chartbrew to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-61851
6.5
0%
Sep 21
Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool
Affected: < 5.2.2
CVE-2026-40603
6.5
0%
Apr 30
Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override
Affected: = 4.9.0
CVE-2026-35514
6.5
0%
Apr 30
Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrew
Affected: = 4.9.0
CVE-2026-25877
6.5
0%
Mar 6
Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations
Affected: < 4.8.1
CVE-2026-61743
6.3
0%
Sep 21
Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation
Affected: < 5.2.2
CVE-2026-61852
5.8
0%
Sep 21
Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Tool
Affected: < 5.2.2
CVE-2026-27605
5.4
0%
Mar 6
Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API
Affected: < 4.8.4
Showing 7