chartbrew

8 results · Clear filters · Feed

• Medium 4.6
  CVE-2026-69128

  Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier + pg_stat_file/pg_ls_* sibling gap)

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In 5.2.2, the AI SQL blocklist omitted sibling PostgreSQL filesystem functions and failed to match double-quoted identifier forms of…

  chartbrew chartbrew
  Nov 6, 2026
• Medium 6.5
  CVE-2026-61851

  Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery() implementation in server/modules/ai/orchestrator/tools/runQuery.js attempts to enforce read-o…

  chartbrew chartbrew
  Sep 21, 2026
• Medium 5.8
  CVE-2026-61852

  Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Tool

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery() implementation in server/modules/ai/orchestrator/tools/runQuery.js interpolates the AI tool's…

  chartbrew chartbrew
  Sep 21, 2026
• Medium 6.3
  CVE-2026-61743

  Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's server/modules/safeRequest.js calls validateOutboundUrl() to resolve and validate a target hostname, but…

  chartbrew chartbrew
  Sep 21, 2026
• Medium 6.5
  CVE-2026-40603

  Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes a legacy dashboard route that returns a project's report data to any authenticated member of the…

  chartbrew chartbrew
  Apr 30, 2026
• Medium 6.5
  CVE-2026-35514

  Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrew

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any invite token, authentication header, or session. Any unauthe…

  chartbrew chartbrew
  Apr 30, 2026
• Medium 6.3
  CVE-2026-27605

  Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the application allows uploading files (project logos) without validating the file type or content. It trust…

  chartbrew chartbrew
  Mar 6, 2026
• Medium 6.5
  CVE-2026-25877

  Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs authorization checks based solely on the project_id parameter when handling chart-r…

  chartbrew chartbrew
  Mar 6, 2026