Product by Lightdash

    Lightdash

    7 known vulnerabilities in Lightdash (Lightdash), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Lightdash (Lightdash)
    HighCVE-2023-35844

    Lightdash: Path Traversal

    7.5
    HighCVE-2024-6586

    Lightdash: Insertion of Sensitive Information Into Sent Data

    7.3
    HighCVE-2026-61576

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    —
    HighCVE-2026-61654

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    —
    MediumCVE-2026-72846

    Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

    6.4
    MediumCVE-2026-108747

    Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

    4.2
    MediumCVE-2024-6585

    Lightdash: Cross-site Scripting

    5.4

    All products by Lightdash