Login Request a demo
LI
Product
lightdash
by lightdash · last CVE Oct 29, 2026
7
CVEs
0
On KEV
8.3
Max CVSS
3
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 4Medium 3Low 0
Severity
All severities7Critical0High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lightdash to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72846
6.4
0%
Aug 20
Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery
Affected: before 1.146.4
CVE-2024-6585
5.4
1%
Aug 30
Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote…
Affected: 0.1024.6 before 0.1042.2
CVE-2026-108747
4.2
0%
Oct 11
Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion
Affected: through 2.556.0
Showing 3