Skip to content
OpenAdvisories

Vendor

getredash

7 known vulnerabilities.

Products

redash 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-42093

    Redash: SQL Injection via Query Results parameterized query substitution

    Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replac…

    getredash redash
  • High 8.1
    CVE-2021-41192 Scanner template

    Insecure default configuration

    Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without explicitly specifying the `REDASH_COOKIE_SECRET` or `REDASH_SECRET_KEY` environment variables, a default value is used for both that is the sa…

    getredash redash