CVE-2026-61743

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's server/modules/safeRequest.js calls validateOutboundUrl to resolve and validate a target hostname, but request-promise performs a separate DNS...

CVE-2026-61743 Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's server/modules/safeRequest.js calls validateOutboundUrl to resolve and validate a target hostname, but request-promise performs a separate DNS...

CVE-2026-61743

Chartbrew , an open-source web application for generating charts from databases and APIs, is affected by a DNS rebinding SSRF bypass prior to version 5.2.2 . The root cause is a time-of-check-time-of-use (TOCTOU) flaw: server/modules/safeRequest.js calls validateOutboundUrl() to resolve and valid...

PT-2026-96299

Name of the Vulnerable Software and Affected Versions Chartbrew versions prior to 5.2.2 Description An authenticated user capable of creating or testing API connections can exploit a DNS rebinding condition. This occurs because the validateOutboundUrl function in server/modules/safeRequest.js...