Login Request a demo
CH
Product
Chartbrew
by Depomo · last CVE Apr 10, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Chartbrew to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27005
9.8
1%
Mar 6
Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)
Affected: before 4.8.3
CVE-2026-30232
9.6
0%
Apr 10
Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs
Affected: before 4.8.5
CVE-2026-25888
8.8
1%
Mar 6
Chartbrew: Remote Code Execution (RCE) via Vulnerable API
Affected: before 4.8.1
CVE-2026-32252
7.7
0%
Apr 10
Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id`
Affected: before 4.9.0
CVE-2026-27603
7.5
0%
Mar 6
Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions
Affected: before 4.8.4
CVE-2026-25887
7.2
1%
Mar 6
Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query
Affected: before 4.8.1
CVE-2026-25877
6.5
0%
Mar 6
Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations
Affected: before 4.8.1
CVE-2026-27605
5.4
0%
Mar 6
Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API
Affected: before 4.8.4
Showing 8