getredash redash vulnerabilities
7 published CVEs name getredash redash among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-77371
Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access
getredash · redash
Critical9.3 - CVE-2026-76083
Redash: JSON data source query URL can bypass base URL restriction
getredash · redash
Medium4.9 - CVE-2026-42093
Redash: SQL Injection via Query Results parameterized query substitution
getredash · redash
High8.7 - CVE-2026-33213
Redash: Open redirect vulnerability in post-login redirect handling
getredash · redash
Medium6.1 - CVE-2021-43780
Server-Side Request Forgery (SSRF) in Redash
getredash · redash
Medium6.8 - CVE-2021-41192
Insecure default configuration
getredash · redash
High8.1 - CVE-2021-43777
Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce)
getredash · redash
Medium6.8