{"api_version":"v1","generated_at":"2026-10-08T20:40:00+00:00","product":{"cve_count":25,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-metabase-metabase-acc8c4764c81","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/metabase","name":"Metabase","next_cursor":null,"observations":[{"affected":"Metabase: \u2264 0.63.18","affected_versions_present":true,"cve_id":"CVE-2026-92813","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92813","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-17T13:42:23.657Z","patch_url":"","primary_source":"","published":"2026-09-16T20:32:58.969Z"},{"affected":"metabase: 0.57.0 < 0.63.1","affected_versions_present":true,"cve_id":"CVE-2026-86116","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86116","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:21:03.411Z","patch_url":"","primary_source":"","published":"2026-09-05T09:59:06.683Z"},{"affected":"x.58.0 < x.58.24; x.59.0 < x.59.21; x.60.0 < x.60.17; x.61.0 < x.61.11; x.62.0 < x.62.9; x.63.0 < x.63.5","affected_versions_present":true,"cve_id":"CVE-2026-72900","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72900","fixed":"x.58.24; x.59.21; x.60.17; x.61.11; x.62.9; x.63.5","last_modified":"2026-08-10T20:04:45.028Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-8hmm-hrhg-ppqp","primary_source":"","published":"2026-08-10T17:56:23.099Z"},{"affected":"x.58.0 < x.58.24; x.59.0 < x.59.21; x.60.0 < x.60.17; x.61.0 < x.61.11; x.62.0 < x.62.9; x.63.0 < x.63.5","affected_versions_present":true,"cve_id":"CVE-2026-72899","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72899","fixed":"x.58.24; x.59.21; x.60.17; x.61.11; x.62.9; x.63.5","last_modified":"2026-08-11T03:55:38.382Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-r8h2-qpfx-mx59","primary_source":"","published":"2026-08-10T17:56:09.950Z"},{"affected":"Metabase: x.58.0 < x.58.24, x.59.0 < x.59.21, x.60.0 < x.60.17, x.61.0 < x.61.11, x.62.0 < x.62.9, x.63.0 < x.63.5","affected_versions_present":true,"cve_id":"CVE-2026-72898","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72898","fixed":"Metabase: x.58.24, x.59.21, x.60.17, x.61.11, x.62.9, x.63.5","last_modified":"2026-08-12T14:50:08.735Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf","primary_source":"","published":"2026-08-10T17:55:54.841Z"},{"affected":">= 1.57.0, < 1.57.19.1; >= 1.58.0, < 1.58.14.1; >= 1.59.0, < 1.59.10; >= 1.60.0, < 1.60.4","affected_versions_present":true,"cve_id":"CVE-2026-50147","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50147","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T16:04:03.343Z","patch_url":"","primary_source":"","published":"2026-07-15T15:21:23.107Z"},{"affected":">= 1.54.0, < 1.54.24; >= 1.55.0, < 1.55.24; >= 1.56.0, < 1.56.25; >= 1.57.0, < 1.57.19; >= 1.58.0, < 1.58.14; >= 1.59.0, < 1.59.10; >= 1.60.0, < 1.60.4","affected_versions_present":true,"cve_id":"CVE-2026-50148","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50148","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-20T14:55:07.812Z","patch_url":"","primary_source":"","published":"2026-07-15T15:18:04.142Z"},{"affected":">= 1.55.0, < 1.58.15.1; >= 1.59.0, < 1.59.12; >= 1.60.0, < 1.60.6.3; >= 1.61.0, < 1.61.2","affected_versions_present":true,"cve_id":"CVE-2026-59826","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59826","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-10T03:55:49.067Z","patch_url":"https://github.com/metabase/metabase/commit/74032e5e0a5a70dc45a6a744d37b9ba24eee8d01","primary_source":"","published":"2026-07-09T17:46:36.365Z"},{"affected":">= 1.58.0, < 1.58.15; >= 1.59.0, < 1.59.12; >= 1.60.0, < 1.60.6.3; >= 1.61.0, < 1.61.1.4","affected_versions_present":true,"cve_id":"CVE-2026-59827","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59827","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-09T18:24:48.433Z","patch_url":"https://github.com/metabase/metabase/commit/00f42511fe3bc4385652a2e96862ee6fd7d42cf8","primary_source":"","published":"2026-07-09T17:43:57.546Z"},{"affected":"< 1.54.22; >= 1.55.0, < 1.55.22; >= 1.56.0, < 1.56.22; >= 1.57.0, < 1.57.16; >= 1.58.0, < 1.58.10; >= 1.59.0, < 1.59.4","affected_versions_present":true,"cve_id":"CVE-2026-33725","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33725","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-28T03:55:51.956Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229","primary_source":"","published":"2026-03-27T00:19:39.397Z"},{"affected":"< 0.57.13; >= 0.58.x, < 0.58.7","affected_versions_present":true,"cve_id":"CVE-2026-27464","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27464","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-24T18:51:05.408Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-vcj8-rcm8-gfj9","primary_source":"","published":"2026-02-21T07:57:50.957Z"},{"affected":">= 0.57.0-beta, < 57.1; >= 0.56.0-beta, < 56.3; < 55.13","affected_versions_present":true,"cve_id":"CVE-2026-22805","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22805","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-13T19:07:47.948Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-2wgg-7r2p-cmqx","primary_source":"","published":"2026-01-12T22:36:35.272Z"},{"affected":">= 0.52.12, < 0.52.17.1; >= 1.52.12, < 1.52.17.1; >= 0.53.2.3, < 0.53.9.5; >= 1.53.2.3, < 1.53.9.5; >= 0.54.0.0, < 0.54.1.5; >= 1.54.0.0, < 1.54.1.5","affected_versions_present":true,"cve_id":"CVE-2025-32382","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32382","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-10T15:23:19.566Z","patch_url":"","primary_source":"","published":"2025-04-10T14:40:53.861Z"},{"affected":"< 0.52.16.4; < 1.52.16.4; < 0.53.8; < 1.53.8","affected_versions_present":true,"cve_id":"CVE-2025-30371","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30371","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-28T15:42:10.181Z","patch_url":"","primary_source":"","published":"2025-03-28T14:47:36.718Z"},{"affected":">= 1.47.0, < 1.50.36; >= 1.51.0, < 1.51.14; >= 1.52.0, < 1.51.11; >= 1.53.0, < 1.53.2","affected_versions_present":true,"cve_id":"CVE-2025-27141","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27141","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-25T14:31:28.020Z","patch_url":"","primary_source":"","published":"2025-02-24T22:05:14.188Z"},{"affected":">= 1.52.0, < 1.52.2.5","affected_versions_present":true,"cve_id":"CVE-2024-55951","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-55951","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-12-17T15:17:36.574Z","patch_url":"","primary_source":"","published":"2024-12-16T20:03:54.861Z"},{"affected":"< 0.43.7.3; >= 0.44.0.0, < 0.44.7.3; >= 0.45.0.0, < 0.45.4.3; >= 0.46.0.0, < 0.46.6.4; >= 1.0.0, < 1.43.7.3; >= 1.44.0.0, < 1.44.7.3; >= 1.45.0.0, < 1.45.4.3; >= 1.46.0.0, < 1.46.6.4","affected_versions_present":true,"cve_id":"CVE-2023-37470","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-37470","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-17T14:54:36.299Z","patch_url":"https://github.com/metabase/metabase/security/advisories/GHSA-p7w3-9m58-rq83","primary_source":"","published":"2023-08-04T15:12:43.188Z"},{"affected":"< 0.44.7; >= 1.0.0, < 1.44.7; >= 0.45.0, < 0.45.4; >= 1.0.0, < 1.45.4; >= 0.46.0, < 0.46.3; >= 1.0.0, < 1.46.3","affected_versions_present":true,"cve_id":"CVE-2023-32680","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-32680","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-12T16:38:47.023Z","patch_url":"https://github.com/metabase/metabase/pull/30852","primary_source":"","published":"2023-05-18T22:55:30.636Z"},{"affected":"< 0.43.7.1; >= 0.44.0-RC1, < 0.44.6.1; >= 0.45.0-RC1, < 0.45.2.1; >= 1.0.0, < 1.43.7.1; >= 1.44.0-RC1, < 1.44.6.1; >= 1.45.0-RC1, < 1.45.2.1","affected_versions_present":true,"cve_id":"CVE-2023-23629","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-23629","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-10T21:17:37.583Z","patch_url":"","primary_source":"","published":"2023-01-28T01:23:33.300Z"},{"affected":"< 0.43.7.1; >= 0.44.0-RC1, < 0.44.6.1; >= 0.45.0-RC1, < 0.45.2.1; >= 1.0.0, < 1.43.7.1; >= 1.44.0-RC1, < 1.44.6.1; >= 1.45.0-RC1, < 1.45.2.1","affected_versions_present":true,"cve_id":"CVE-2023-23628","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-23628","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-10T21:17:43.694Z","patch_url":"","primary_source":"","published":"2023-01-28T01:11:16.710Z"},{"affected":"< 0.41.9; >= 0.42.0, < 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.41.9; >= 1.42.0, < 1.42.6; >= 1.43.0, < 1.43.7; >= 1.44.0, < 1.44.5","affected_versions_present":true,"cve_id":"CVE-2022-39362","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39362","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:42:26.901Z","patch_url":"https://github.com/metabase/metabase/commit/b7c6bb905a9187347cfc9035443b514713027a5c","primary_source":"","published":"2022-10-26T00:00:00.000Z"},{"affected":"< 0.41.9; >= 0.42.0, < 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.41.9; >= 1.42.0, < 1.42.6; >= 1.43.0, < 1.43.7; >= 1.44.0, < 1.44.5","affected_versions_present":true,"cve_id":"CVE-2022-39361","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39361","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T16:42:33.265Z","patch_url":"","primary_source":"","published":"2022-10-26T00:00:00.000Z"},{"affected":"< 0.41.9; >= 0.42.0, < 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.41.9; >= 1.42.0, < 1.42.6; >= 1.43.0, < 1.43.7; >= 1.44.0, < 1.44.5","affected_versions_present":true,"cve_id":"CVE-2022-39360","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39360","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:42:39.520Z","patch_url":"https://github.com/metabase/metabase/commit/edadf7303c3b068609f57ca073e67885d5c98730","primary_source":"","published":"2022-10-26T00:00:00.000Z"},{"affected":"< 0.41.9; >= 0.42.0, < 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.41.9; >= 1.42.0, < 1.42.6; >= 1.43.0, < 1.43.7; >= 1.44.0, < 1.44.5","affected_versions_present":true,"cve_id":"CVE-2022-39359","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39359","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:42:47.570Z","patch_url":"https://github.com/metabase/metabase/commit/057e2d67fcbeb6b48db68b697e022243e3a5771e","primary_source":"","published":"2022-10-26T00:00:00.000Z"},{"affected":"< 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.42.6; >= 1.43.0, < 1.43.7; >= 1.44.0, < 1.44.5","affected_versions_present":true,"cve_id":"CVE-2022-39358","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39358","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T16:42:54.892Z","patch_url":"","primary_source":"","published":"2022-10-26T00:00:00.000Z"},{"affected":">= 1.40.0, < 1.40.7; >= 0.40.0, < 0.40.7; >= 1.41.0, < 1.41.6; >= 0.41.0, < 0.41.6; >= 1.42.0, < 1.42.3; >= 0.42.0, < 0.42.3","affected_versions_present":true,"cve_id":"CVE-2022-24853","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24853","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-22T18:15:36.022Z","patch_url":"","primary_source":"","published":"2022-04-14T21:45:16.000Z"},{"affected":">= 1.41.0, < 1.41.7; >= 0.41.0, < 0.41.7; >= 1.42.0, < 1.42.4; >= 0.42.0, < 0.42.4","affected_versions_present":true,"cve_id":"CVE-2022-24854","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24854","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T18:39:11.015Z","patch_url":"","primary_source":"","published":"2022-04-14T21:40:11.000Z"},{"affected":">= 1.40.0, < 1.40.8; >= 0.40.0, < 0.40.8; >= 1.41.0, < 1.41.7; >= 0.41.0, < 0.41.7; >= 1.42.0, < 1.42.4; >= 0.42.0, < 0.42.4","affected_versions_present":true,"cve_id":"CVE-2022-24855","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24855","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T18:39:18.551Z","patch_url":"","primary_source":"","published":"2022-04-14T21:35:11.000Z"},{"affected":"metabase: < 0.40.5, >= 1.0.0, < 1.40.5","affected_versions_present":true,"cve_id":"CVE-2021-41277","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41277","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-10-07T17:37:15.658Z","patch_url":"https://github.com/metabase/metabase/commit/042a36e49574c749f944e19cf80360fd3dc322f0","primary_source":"","published":"2021-11-17T20:05:11.000Z"},{"affected":"version 0.29.3 and earlier","affected_versions_present":true,"cve_id":"CVE-2018-0697","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-0697","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-05T03:35:49.107Z","patch_url":"","primary_source":"","published":"2018-11-15T15:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"metabase"}}