[ Vendor · 4 CVEs ]
metabase
CVEs affecting metabase published in the last 30 days, plus any metabase CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103928 | 13 Oct 2026 | CVSS 9.3 | metabaseMetabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and… | |
| CVE-2026-72898 | 10 Aug 2026 | CVSS 10.0 | Metabase SQL InjectionMetabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access… | ExploitedFix |
| CVE-2021-41277 | 17 Nov 2021 | CVSS 7.5 | Metabase GeoJSON API Local File InclusionMetabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map… | ExploitedFix |
| CVE-2021-41277 | 17 Nov 2021 | CVSS 7.5 | Metabase GeoJSON API Local File InclusionMetabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map… | ExploitedFix |