CVE-2026-85708

Versions of Chartbrew prior to 5.2.3 are vulnerable to an information disclosure flaw due to improper cryptographic signature verification (CWE-347 ). The application uses CB_SECRET to sign share and embed tokens; however, stock source and repository Docker Compose installs often use known or shi...

EUVD-2026-118503

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chart share and embed tokens were signed with CBSECRET, including known or shipped-default values in stock source and repository Docker Compose installs...