Lightdash - vulnerabilities (CVEs)

5 CVEs in 1 products, 1 in the last 30 days, newest from 2026-10-11.

Products

• Lightdash - 4 CVEs

Newest CVEs of Lightdash

• CVE-2026-108747 - CVSS 4.2 (medium), 2026-10-11: Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access…
• CVE-2026-72846 - CVSS 6.4 (medium), 2026-08-20: Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in…
• CVE-2024-6586 - CVSS 7.3 (high), 2024-08-30: Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that…
• CVE-2024-6585 - CVSS 5.4 (medium), 2024-08-30: Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6…
• CVE-2023-35844 - CVSS 7.5 (high), 2023-06-19: packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an…