CH
Vendor
chartbrew
19
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65980 | CH chartbrew chartbrew | 7.9 | Sep 21 | Chartbrew: SQL Injection via Missing Backslash Escaping in ClickHouse Variable Substitution |
| CVE-2026-61851 | CH chartbrew chartbrew | 6.5 | Sep 21 | Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool |
| CVE-2026-61852 | CH chartbrew chartbrew | 5.8 | Sep 21 | Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Tool |
| CVE-2026-61743 | CH chartbrew chartbrew | 6.3 | Sep 21 | Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation |
| CVE-2026-41518 | CH chartbrew chartbrew | 7.6 | Jun 4 | Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend) |
| CVE-2026-40603 | CH chartbrew chartbrew | 6.5 | Apr 30 | Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override |
| CVE-2026-40601 | CH chartbrew chartbrew | 7.5 | Apr 30 | Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle |
| CVE-2026-40600 | CH chartbrew chartbrew | 8.1 | Apr 30 | Chartbrew: Incorrect Access Control in project share policy routes via unbound policy_id |
| CVE-2026-40595 | CH chartbrew chartbrew | 7.5 | Apr 30 | Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checks |
| CVE-2026-35514 | CH chartbrew chartbrew | 6.5 | Apr 30 | Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrew |
| CVE-2026-40904 | CH chartbrew chartbrew | 8.1 | Apr 30 | Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checks |
| CVE-2026-32252 | CH chartbrew chartbrew | 7.7 | Apr 10 | Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id` |
| CVE-2026-30232 | CH chartbrew chartbrew | 9.6 | Apr 10 | Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs |
| CVE-2026-27605 | CH chartbrew chartbrew | 5.4 | Mar 6 | Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API |
| CVE-2026-27603 | CH chartbrew chartbrew | 7.5 | Mar 6 | Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions |
| CVE-2026-27005 | CH chartbrew chartbrew | 9.8 | Mar 6 | Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables) |
| CVE-2026-25888 | CH chartbrew chartbrew | 8.8 | Mar 6 | Chartbrew: Remote Code Execution (RCE) via Vulnerable API |
| CVE-2026-25887 | CH chartbrew chartbrew | 7.2 | Mar 6 | Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query |
| CVE-2026-25877 | CH chartbrew chartbrew | 6.5 | Mar 6 | Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations |