Getredash vulnerabilities
We track 2 vulnerabilities in Getredash products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score
Latest Getredash vulnerabilities
- 9.3 Critical severity
redash: Improper Access Control
Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _connect() path in redash/query_runner/duckdb.py created connections with enable_external_access left at its default value of true. A user with query ac
- 8.7 High severity
redash: Improper Neutralization of Special Elements used in an SQL Command
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replace