CH
Product
Chartbrew
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 2Low 0
Watch
Add Chartbrew to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25888 | 8.8 | Mar 6 | Chartbrew: Remote Code Execution (RCE) via Vulnerable API Affected: before 4.8.1 |
| CVE-2026-32252 | 7.7 | Apr 10 | Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id` Affected: before 4.9.0 |
| CVE-2026-27603 | 7.5 | Mar 6 | Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions Affected: before 4.8.4 |
| CVE-2026-25887 | 7.2 | Mar 6 | Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query Affected: before 4.8.1 |
Showing 4