Chartbrew
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 6, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation
Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend)
Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override
Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle
Chartbrew: Incorrect Access Control in project share policy routes via unbound policy_id
Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checks
Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrew
Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checks
Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id`
Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs
Monitor Chartbrew in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.