Cube

4 CVEs across 1 Cube products. Browse Cube vulnerabilities, severities, and proof-of-concept exploits.

Cube products with known CVEs

ProductCVEs
Cube.js4
Cube CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25958High7.72026-02-09Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possible to make a specially crafted request w…
CVE-2026-25957Medium6.52026-02-09Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by subm…
CVE-2023-50709Medium6.52023-12-13Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a speci…
CVE-2022-23510Critical9.62022-12-09cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL row-level security and run arbitrary S…