growthbook

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

growthbook records in CISA KEV

No growthbook vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Growthbook 1 record LOW

Records

2 records

TI-2022-16488 CVE-2022-36065

GrowthBook account creation and file upload vulnerability in self-hosted configurations

LOW 38

GrowthBook is an open-source platform for feature flagging and A/B testing.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01464 Published 2022-09-06 Fixed in 2022-08-29 CWE-22

TI-2026-61921 CVE-2026-91198 · GHSA-gv2h-crgm-gfwc

GrowthBook through 5.0.1 Information Disclosure via Public Endpoints

LOW 37

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00419 Published 2026-09-14 No fix listed CWE-201

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0