ME
Product
metabase
by metabase · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
31
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 8High 9Medium 14Low 0
Watch

Add metabase to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-41277
In wildKEV
7.5
97%
Nov 17
GeoJSON URL validation can expose server files and environment variables to unauthorized users
Affected: < 0.40.5; >= 1.0.0, < 1.40.5
Showing 1