Lightdash vulnerabilities

Products

• Lightdash 7

Newest

• lightdash Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key CVE-2026-61654 8.3 HighOctober 29, 2026
• lightdash Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key CVE-2026-61576 8.3 HighOctober 29, 2026
• lightdash Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion CVE-2026-108747 2.3 LowOctober 11, 2026
• lightdash Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery CVE-2026-72846 5.3 MediumAugust 20, 2026
• lightdash Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat… CVE-2024-6586 7.3 HighAugust 30, 2024
• lightdash Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to in… CVE-2024-6585 5.4 MediumAugust 30, 2024
• lightdash packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they... CVE-2023-35844 Public exploit 7.5 HighJune 19, 2023