Ggetredash

Products

Exploited and recent CVEs

• CVE-2026-77371 Critical 9.3 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access 0.5%
• CVE-2026-76083 Medium 4.9 Redash: JSON data source query URL can bypass base URL restriction 0.4%
• CVE-2026-42093 High 8.7 Redash: SQL Injection via Query Results parameterized query substitution 0.7%
• CVE-2026-33213 Medium 6.1 Redash: Open redirect vulnerability in post-login redirect handling 0.3%
• CVE-2021-43780 Medium 6.8 Server-Side Request Forgery (SSRF) in Redash 1.0%
• CVE-2021-41192 High 8.1 Insecure default configuration 8.1%
• CVE-2021-43777 Medium 6.8 Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce) 0.3%