chartbrew güvenlik açıkları
chartbrew
- Toplam açık
- 11
- Kritik
- 4
- Aktif istismar
- 0
- Yaması çıkan
- 10
- Son açık
- 55 dk önce
Önem dağılımı
- Kritik 4
- Yüksek 6
- Orta 1
- Düşük 0
Son açıklar
6 açık
- 7,5Yüksek CVE-2026-68933Yama var Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage
- 8,1Yüksek CVE-2026-85736Yama var Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH paths
- 7,5Yüksek CVE-2026-85726Yama var Chartbrew: Blind NoSQL injection via date variable in embedded chart
- 8,8Yüksek CVE-2026-85712Yama var Chartbrew: Cross-tenant project takeover via body.team_id in /project routes
- 7,5Yüksek CVE-2026-85708Yama var Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens
- 7,0Yüksek CVE-2026-54589Yama var Chartbrew: SSRF guard bypass via IPv6 NAT64/DNS64 addresses in API Data Connection outbound policy (validateOutboundUrl)