metabase
Safeguard articles tagged "metabase" — guides, analysis, and best practices for software supply chain and application security.
3 articles
CVE-2021-41277: Metabase GeoJSON API Local File Inclusion Vulnerability
CVE-2021-41277 affects Metabase Metabase and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-12.
CVE-2026-72898: Metabase SQL Injection Vulnerability
CVE-2026-72898 affects Metabase Metabase and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-11.
Metabase's Password Reset Endpoint Was a CVSS 10.0 SQL Injection
CVE-2026-72898 lets an unauthenticated attacker inject SQL through Metabase's own password-reset flow and gain full administrator access to the connected BI instance.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.