CVE-2026-61654

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook "POST /api/v1/projects/projectUuid/dbt-cloud/webhook" has no authentication middleware or signature validation. In "packages/backend/src/controllers/projectController.ts",...