@cubejs-backend/server-core vulnerabilities (npm)

2 vulnerabilities.

• @cubejs-backend/server-core npm Cube privilege escalation via a specially crafted request CVE-2026-25958 Fix available 7.7 HighFebruary 9, 2026
• @cubejs-backend/server-core npm Cube Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted request CVE-2026-25957 Fix available 6.5 MediumFebruary 9, 2026