Vulnerabilities

TI-2026-20983 CVE-2026-25958 · GHSA-v226-32c7-x2v7

Cube privilege escalation via a specially crafted request

LOW 34

Cube is a semantic layer for building data applications.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00382 Published 2026-02-09 Fixed in 1.0.14, 1.4.2 +1 CWE-807

TI-2026-20982 CVE-2026-25957 · GHSA-9vph-2hvm-x66g

LOW 29

Cube is a semantic layer for building data applications.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00434 Published 2026-02-09 Fixed in 1.4.2, 1.5.13 CWE-755

TI-2023-27655 CVE-2023-50709 · GHSA-9759-3276-g2pm

LOW 34

Cube is a semantic layer for building data applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00722 Published 2023-12-13 Fixed in 0.34.34 CWE-20

TI-2022-07569 CVE-2022-23510 · GHSA-6jqm-3c9g-pch7

MEDIUM 45

cube-js is a headless business intelligence platform.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00974 Published 2022-12-09 Fixed in 0.31.24 CWE-89