lightdash
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 5
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, lightdash recorded 5 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, lightdash had the most security vulnerabilities in the lightdash ecosystem, with 5 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121631Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard EndpointsCVE-2026-61654Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API keyCVE-2026-61576Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API keyCVE-2026-108747Lightdash through 2.556.0 Authorization Bypass via Personal Access Token DeletionCVE-2026-72846Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery7 Results | Page 1 of 1
| SeverityHigh |
| SeverityHigh |
| SeverityLow |
| SeverityMedium |