Skip to content
OpenAdvisories

Vendor

growthbook

2 known vulnerabilities.

Products

growthbook 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-91198

    GrowthBook through 5.0.1 Information Disclosure via Public Endpoints

    GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read…

    growthbook growthbook