Cube - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2026-02-09.

Products

• Cube.js - 4 CVEs

Newest CVEs of Cube

• CVE-2026-25958 - CVSS 7.7 (high), 2026-02-09: Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possible to make a specially crafted request…
• CVE-2026-25957 - CVSS 6.5 (medium), 2026-02-09: Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by…
• CVE-2023-50709 - CVSS 7.5 (high), 2023-12-13: Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a…
• CVE-2022-23510 - CVSS 9.6 (critical), 2022-12-09: cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL row-level security and run arbitrary…