Lucene search
+L

3 matches found

CVE
CVE
•added 2026/09/14 10:10 p.m.•41 views

CVE-2026-91198

GrowthBook through version 5.0.1 is affected by an information disclosure vulnerability in its unauthenticated public report and experiment endpoints. The root cause is that fact table definitions , including raw warehouse SQL , are returned unredacted in the response payloads. An attacker who kn...

6.9CVSS5.8AI score0.00419EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•10 views

CVE-2026-91198: Insertion of Sensitive Information Into Sent Data

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...

6.9CVSS5.8AI score0.00419EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/03/07 12:32 a.m.•28 views

[SECURITY] Fedora 44 Update: postgresql16-anonymizer-3.0.5-2.fc44

PostgreSQL Anonymizer is an extension to mask or replace personally identifiable information PII or commercially sensitive data from a PostgreSQL database. The project has a declarative approach of anonymization. This means you can declare the masking rules using the PostgreSQL Data Definition...

8CVSS6AI score0.00334EPSS
SaveExploits0
Rows per page
Query Builder