Lucene search
+L

27 matches found

Veracode
Veracode
•added 2026/02/12 7:38 a.m.•19 views

Denial Of Service (DoS)

@cubejs-backend/server-core is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of specially crafted requests to a Cube API endpoint, which allows an attacker to make the entire Cube API unavailable...

6.5CVSS6AI score0.00441EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2026/02/12 5:05 a.m.•22 views

Privilege Escalation

@cubejs-backend/server-core is vulnerable to Privilege Escalation. The vulnerability is due to improper authorization validation of specially crafted requests using a valid API token, which allows an attacker to escalate privileges beyond their intended access level...

7.7CVSS6AI score0.00388EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•7 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25957 Source advisory: OSV:GHSA-9VPH-2HVM-X66G...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•3 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25957 Source advisory: GHSA-9VPH-2HVM-X66G...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•2 views

@cubejs-backend/server (>=1.1.17, <=1.4.1), @cubejs-backend/testing-drivers (>=1.1.17, <=1.4.1) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.1.17, <=1.4.1)

@cubejs-backend/server-core NPM version =1.1.17, =1.1.17, =1.1.17, =1.4.1 Source cves: CVE-2026-25957 Source advisory: GHSA-9VPH-2HVM-X66G...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•9 views

@cubejs-backend-json-clone/server (1.0.0), @cubejs-backend/server (>=0.27.0, <=1.0.13) +4 more potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=0.27.53, <=1.0.13)

@cubejs-backend/server-core NPM version =0.27.53, =0.27.0, =0.27.0, =0.27.0, =0.27.0, =0.32.28, =1.0.13 Source cves: CVE-2026-25958 Source advisory: OSV:GHSA-V226-32C7-X2V7...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•16 views

@cubejs-backend/server (>=1.1.0, <=1.4.1), @cubejs-backend/testing-drivers (>=1.1.0, <=1.4.1) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.1.0, <=1.4.1)

@cubejs-backend/server-core NPM version =1.1.0, =1.1.0, =1.1.0, =1.4.1 Source cves: CVE-2026-25958 Source advisory: OSV:GHSA-V226-32C7-X2V7...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•5 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25958 Source advisory: OSV:GHSA-V226-32C7-X2V7...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•2 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25958 Source advisory: GHSA-V226-32C7-X2V7...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•4 views

@cubejs-backend/server (>=1.1.0, <=1.4.1), @cubejs-backend/testing-drivers (>=1.1.0, <=1.4.1) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.1.0, <=1.4.1)

@cubejs-backend/server-core NPM version =1.1.0, =1.1.0, =1.1.0, =1.4.1 Source cves: CVE-2026-25958 Source advisory: GHSA-V226-32C7-X2V7...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/10 12:29 a.m.•3 views

@cubejs-backend-json-clone/server (1.0.0), @cubejs-backend/server (>=0.27.0, <=1.0.13) +4 more potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=0.27.53, <=1.0.13)

@cubejs-backend/server-core NPM version =0.27.53, =0.27.0, =0.27.0, =0.27.0, =0.27.0, =0.32.28, =1.0.13 Source cves: CVE-2026-25958 Source advisory: GHSA-V226-32C7-X2V7...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 11:21 p.m.•8 views

@codefresh-io/cubejs-backend-server-core (>=0.30.77, <=0.35.49), @cubejs-backend-json-clone/server (1.0.0) +14 more potentially affected by CVE-2026-25958 via @cubejs-backend/api-gateway (>=0.27.53, <=1.0.12)

@cubejs-backend/api-gateway NPM version =0.27.53, =0.30.77, =0.27.0, =0.27.0, =0.27.0, =0.27.0, =0.27.0, =0.32.28, =0.29.4, =1.0.0, =0.27.30, =0.30.61, =0.32.0, =0.33.8 and more Source cves: CVE-2026-25958 Source advisory: SNYK:JS-CUBEJSBACKENDAPIGATEWAY-15265447...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 11:21 p.m.•11 views

@cubejs-backend/server (>=1.1.0, <=1.4.0), @cubejs-backend/server-core (>=1.1.0, <=1.4.0) +2 more potentially affected by CVE-2026-25958 via @cubejs-backend/api-gateway (>=1.1.0, <=1.4.0)

@cubejs-backend/api-gateway NPM version =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.4.0 - cubejs-backend-server-core-fork 1.1.3 Source cves: CVE-2026-25958 Source advisory: SNYK:JS-CUBEJSBACKENDAPIGATEWAY-15265447...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 11:21 p.m.•10 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/server-core (>=1.5.0, <=1.5.12) +1 more potentially affected by CVE-2026-25958 via @cubejs-backend/api-gateway (>=1.5.0, <=1.5.12)

@cubejs-backend/api-gateway NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25958 Source advisory: SNYK:JS-CUBEJSBACKENDAPIGATEWAY-15265447...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 11:21 p.m.•7 views

@cubejs-backend/server (>=1.1.17, <=1.4.0), @cubejs-backend/server-core (>=1.1.17, <=1.4.0) +1 more potentially affected by CVE-2026-25957 via @cubejs-backend/api-gateway (>=1.1.17, <=1.4.0)

@cubejs-backend/api-gateway NPM version =1.1.17, =1.1.17, =1.1.17, =1.1.17, =1.4.0 Source cves: CVE-2026-25957 Source advisory: SNYK:JS-CUBEJSBACKENDAPIGATEWAY-15265448...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 10:42 p.m.•3 views

@cubejs-backend/server (>=1.1.0, <=1.4.1), @cubejs-backend/testing-drivers (>=1.1.0, <=1.4.1) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.1.0, <=1.4.1)

@cubejs-backend/server-core NPM version =1.1.0, =1.1.0, =1.1.0, =1.4.1 Source cves: CVE-2026-25958 Source advisory: MEND:CVE-2026-25958...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 10:42 p.m.•3 views

@cubejs-backend-json-clone/server (1.0.0), @cubejs-backend/server (>=0.27.0, <=1.0.13) +4 more potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=0.27.53, <=1.0.13)

@cubejs-backend/server-core NPM version =0.27.53, =0.27.0, =0.27.0, =0.27.0, =0.27.0, =0.32.28, =1.0.13 Source cves: CVE-2026-25958 Source advisory: MEND:CVE-2026-25958...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 10:42 p.m.•3 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25958 Source advisory: MEND:CVE-2026-25958...

7.7CVSS5.8AI score0.00388EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 10:39 p.m.•3 views

@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)

@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25957 Source advisory: MEND:CVE-2026-25957...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 10:39 p.m.•3 views

@cubejs-backend/server (>=1.1.17, <=1.4.1), @cubejs-backend/testing-drivers (>=1.1.17, <=1.4.1) potentially affected by CVE-2026-25957 via @cubejs-backend/server-core (>=1.1.17, <=1.4.1)

@cubejs-backend/server-core NPM version =1.1.17, =1.1.17, =1.1.17, =1.4.1 Source cves: CVE-2026-25957 Source advisory: MEND:CVE-2026-25957...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0
Rows per page
Query Builder