Skip to content
Ccube-js
Products
| Product | CVEs | Exploited | Latest |
|---|
| cube | 3 | – | Feb 9, 2026 |
| cube.js | 1 | – | Dec 9, 2022 |
Exploited and recent CVEs
-
CVE-2026-25958
High 7.7
Cube privilege escalation via a specially crafted request
0.4%
-
CVE-2026-25957
Medium 6.5
Cube Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted request
0.4%
-
CVE-2023-50709
Medium 6.5
Denial of service attack on the cube-api endpoint
0.7%
-
CVE-2022-23510
Critical 9.6
SQl injection in cube-js
1.0%