EUVD-2026-118511

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In 5.2.2, the AI SQL blocklist omitted sibling PostgreSQL filesystem functions and failed to match double-quoted identifier forms of denied functions. The vulnerable...

CVE-2026-69128

Chartbrew version 5.2.2 contains a vulnerability in its AI query tool's PostgreSQL SQL-validation blocklist . The blocklist omits sibling PostgreSQL filesystem functions and fails to match double-quoted identifier forms of denied functions, allowing an attacker to bypass the denylist. A team Owne...