Security: cube-js/cube
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted requestGHSA-9vph-2hvm-x66g published
Feb 9, 2026 by bsod90Moderate -
Privilege escalation via a specially crafted requestGHSA-v226-32c7-x2v7 published
Feb 9, 2026 by bsod90High -
Denial of service attack on the cube-api endpointGHSA-9759-3276-g2pm published
Dec 13, 2023 by bsod90Moderate -
Row level security bypassGHSA-6jqm-3c9g-pch7 published
Dec 9, 2022 by bsod90High -
Default Express middleware security check is ignored in productionGHSA-4j6x-w426-6rc6 published
Nov 8, 2019 by paveltiunovHigh