@stackflag.bsky.socialCVE-2026-42093 - redash
If you run Redash version 8.0.0 through 26.8.x, a user who can view query results can trick the system into running their own database commands. This could let them read, change, or…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-77371 - redash
Versions 26.0.0 through 26.9.0 of Redash let a user who can run DuckDB queries read any file the Redash service can access or write files to the server. This could expose secret…
Too many irrelevant or confusing CVEs? Use stackflag.com