Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Cube.js
HIGH 7.7
CVE-2026-25958
Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possible to make a specially crafted…
Fix: 1.0.14 / 1.4.2+
Fix from $1,950
2026-02-09
Cube.js
MEDIUM 6.5
CVE-2026-25957
Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailab…
Fix: 1.4.2 / 1.5.13+
Fix from $1,600
2026-02-09
Cube.js
HIGH 7.5
CVE-2023-50709
Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitti…
Fix: 0.34.34+
Fix from $1,950
2023-12-13
Cube.js
HIGH 8.8
CVE-2022-23510
cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL row-level security and run a…
Patch available
Fix from $1,950
2022-12-09