EUVD-2026-118510

Chartbrew is an open-source web application for creating charts from databases and APIs. In versions 4.8.5 through 5.2.2, API connection creation and update operations accept the internal allowPrivateHost field from user input. An authenticated user with permission to manage API connections can...

CVE-2026-68935

The open-source web application Chartbrew versions 4.8.5 through 5.2.2 is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is that API connection creation and update operations accept the internal allowPrivateHost field from user input. An authenticated user with permissions to...