Skip to content
OpenAdvisories

Vendor

lightdash

7 known vulnerabilities.

Products

lightdash 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-61654

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook` has no authentication middleware or signature validation. In `packages/backend/src…

    lightdash lightdash
  • High 8.3
    CVE-2026-61576

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook` has no authentication middleware or signature validation. In `packages/backend/src…

    lightdash lightdash
  • High 7.3
    CVE-2024-6586

    Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and …

    lightdash lightdash