Lightdash vulnerabilities
7 published CVEs name Lightdash among the affected products.
- Published CVEs
- 7
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 2Low 2Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20265
Newest CVEs
- CVE-2026-121631
Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints
lightdash · lightdash
Low2.3 - CVE-2026-61654
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
lightdash · lightdash
High8.3 - CVE-2026-61576
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
lightdash · lightdash
High8.3 - CVE-2026-108747
Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion
Lightdash · lightdash
Low2.3 - CVE-2026-72846
Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery
lightdash · lightdash
Medium5.3 - CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that…
Lightdash · Lightdash
High7.3 - CVE-2024-6585
Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows…
Lightdash · Lightdash
Medium5.4