Vendor

    Lightdash

    7 known vulnerabilities in products by Lightdash, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Lightdash
    HighCVE-2023-35844

    Lightdash: Path Traversal

    		7.5
    HighCVE-2024-6586

    Lightdash: Insertion of Sensitive Information Into Sent Data

    		7.3
    HighCVE-2026-61576

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    		—
    HighCVE-2026-61654

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    		—
    MediumCVE-2026-72846

    Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

    		6.4
    MediumCVE-2026-108747

    Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

    		4.2
    MediumCVE-2024-6585

    Lightdash: Cross-site Scripting

    		5.4

    Products

    Products by Lightdash
    Lightdash70