agentprime: chartbrewEvery new CVE for chartbrew.https://agentprime.io/CVE-2026-65980: Chartbrew: SQL Injection via Missing Backslash Escaping in ClickHouse Variable Substitutionhttps://agentprime.io/advisories/CVE-2026-65980/https://agentprime.io/advisories/CVE-2026-65980/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 21:41:45 GMTCVECVE-2026-61851: Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Toolhttps://agentprime.io/advisories/CVE-2026-61851/https://agentprime.io/advisories/CVE-2026-61851/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 21:40:53 GMTCVECVE-2026-61852: Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Toolhttps://agentprime.io/advisories/CVE-2026-61852/https://agentprime.io/advisories/CVE-2026-61852/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 21:39:52 GMTCVECVE-2026-61743: Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validationhttps://agentprime.io/advisories/CVE-2026-61743/https://agentprime.io/advisories/CVE-2026-61743/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 21:38:47 GMTCVECVE-2026-41518: Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend)https://agentprime.io/advisories/CVE-2026-41518/https://agentprime.io/advisories/CVE-2026-41518/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 19:28:55 GMTCVECVE-2026-40603: Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team overridehttps://agentprime.io/advisories/CVE-2026-40603/https://agentprime.io/advisories/CVE-2026-40603/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 18:23:39 GMTCVECVE-2026-40601: Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh togglehttps://agentprime.io/advisories/CVE-2026-40601/https://agentprime.io/advisories/CVE-2026-40601/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 18:22:43 GMTCVECVE-2026-40600: Chartbrew: Incorrect Access Control in project share policy routes via unbound policy_idhttps://agentprime.io/advisories/CVE-2026-40600/https://agentprime.io/advisories/CVE-2026-40600/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 18:22:16 GMTCVECVE-2026-40595: Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checkshttps://agentprime.io/advisories/CVE-2026-40595/https://agentprime.io/advisories/CVE-2026-40595/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 18:21:28 GMTCVECVE-2026-35514: Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrewhttps://agentprime.io/advisories/CVE-2026-35514/https://agentprime.io/advisories/CVE-2026-35514/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 18:21:09 GMTCVECVE-2026-40904: Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checkshttps://agentprime.io/advisories/CVE-2026-40904/https://agentprime.io/advisories/CVE-2026-40904/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 18:20:44 GMTCVECVE-2026-32252: Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id`https://agentprime.io/advisories/CVE-2026-32252/https://agentprime.io/advisories/CVE-2026-32252/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 19:17:53 GMTCVECVE-2026-30232: Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLshttps://agentprime.io/advisories/CVE-2026-30232/https://agentprime.io/advisories/CVE-2026-30232/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 19:15:11 GMTCVECVE-2026-27605: Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload APIhttps://agentprime.io/advisories/CVE-2026-27605/https://agentprime.io/advisories/CVE-2026-27605/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 04:08:01 GMTCVECVE-2026-27603: Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissionshttps://agentprime.io/advisories/CVE-2026-27603/https://agentprime.io/advisories/CVE-2026-27603/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 04:07:49 GMTCVECVE-2026-27005: Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)https://agentprime.io/advisories/CVE-2026-27005/https://agentprime.io/advisories/CVE-2026-27005/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 04:07:36 GMTCVECVE-2026-25888: Chartbrew: Remote Code Execution (RCE) via Vulnerable APIhttps://agentprime.io/advisories/CVE-2026-25888/https://agentprime.io/advisories/CVE-2026-25888/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 04:07:26 GMTCVECVE-2026-25887: Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Queryhttps://agentprime.io/advisories/CVE-2026-25887/https://agentprime.io/advisories/CVE-2026-25887/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 04:07:12 GMTCVECVE-2026-25877: Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operationshttps://agentprime.io/advisories/CVE-2026-25877/https://agentprime.io/advisories/CVE-2026-25877/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 04:07:01 GMTCVE