DE
Vendor
Depomo
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-32252 | CH Chartbrew Depomo | 7.7 | Apr 10 | Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id` |
| CVE-2026-30232 | CH Chartbrew Depomo | 9.6 | Apr 10 | Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs |
| CVE-2026-27605 | CH Chartbrew Depomo | 5.4 | Mar 6 | Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API |
| CVE-2026-27603 | CH Chartbrew Depomo | 7.5 | Mar 6 | Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions |
| CVE-2026-27005 | CH Chartbrew Depomo | 9.8 | Mar 6 | Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables) |
| CVE-2026-25888 | CH Chartbrew Depomo | 8.8 | Mar 6 | Chartbrew: Remote Code Execution (RCE) via Vulnerable API |
| CVE-2026-25887 | CH Chartbrew Depomo | 7.2 | Mar 6 | Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query |
| CVE-2026-25877 | CH Chartbrew Depomo | 6.5 | Mar 6 | Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations |