ME
Product
Metabase
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Metabase to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5895 | 7.5 | Jun 9 | Metabase dom.js parseDataUri redos Affected: 54.10 |
| CVE-2022-43776 | 6.5 | Oct 26 | The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks Affected: <44.5 |
Showing 2