Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 10, 2026 · NIST NVD

   Detected

   Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authenticated users to create API data connections with arbitrary URLs. The server fetches these URLs using request-promise without any IP address validation, enabling Server-Side Request Forgery attacks against internal networks and cloud

2. Jun 17, 2026 · NIST NVD

   Updated

   Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authenticated users to create API data connections with arbitrary URLs. The server fetches these URLs using request-promise without any IP address validation, enabling Server-Side Request Forgery attacks against internal networks and cloud

Affected

• cpe depomo/chartbrewversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-30232

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-30232

  Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authenticated users to create API data connections with arbitrary URLs. The server fetches these URLs using request-prom

  nvd.nist.gov

References

• Patch · github.com
• Vendor Advisory · github.com