EUVD-2026-118501

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.1, SQL dashboard-variable substitution used attacker-controlled JavaScript replacement strings unsafely across SQL connectors and separately failed to escape...

CVE-2026-54349

The open-source web application Chartbrew is vulnerable to SQL injection in versions prior to 5.2.1 . The issue exists within the applyMysqlOrPostgresVariables function, where SQL dashboard-variable substitution unsafely processes attacker-controlled JavaScript replacement strings across various ...