ME
Product
metabase
On CISA KEVExploited in the wild
34
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 8High 9Medium 15Low 2
Watch
Add metabase to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30371 | 2.1 | Mar 28 | Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint Affected: < 0.52.16.4; < 1.52.16.4; < 0.53.8; < 1.53.8 |
| CVE-2025-32382 | 1.8 | Apr 10 | Snowflake credentials logged by the Metabase backend Affected: >= 0.52.12, < 0.52.17.1; >= 1.52.12, < 1.52.17.1; >= 0.53.2.3, < 0.53.9.5; >= 1.53.2.3, < 1.53.9.5; >= 0.54.0.0, < 0.54.1.5; >= 1.54.0.0, < 1.54.1.5 |
Showing 2