getredash redash vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20264

Newest CVEs

• CVE-2026-77371

  Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access

  getredash · redash

  Critical9.3
• CVE-2026-76083

  Redash: JSON data source query URL can bypass base URL restriction

  getredash · redash

  Medium4.9
• CVE-2026-42093

  Redash: SQL Injection via Query Results parameterized query substitution

  getredash · redash

  High8.7
• CVE-2026-33213

  Redash: Open redirect vulnerability in post-login redirect handling

  getredash · redash

  Medium6.1
• CVE-2021-43780

  Server-Side Request Forgery (SSRF) in Redash

  getredash · redash

  Medium6.8
• CVE-2021-41192

  Insecure default configuration

  getredash · redash

  High8.1
• CVE-2021-43777

  Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce)

  getredash · redash

  Medium6.8