Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical10.0Metabase SQL Injection VulnerabilityCVE-2026-72898 · Metabase · Metabase · CISA KEV · CVE.org · FIRST EPSS · MetabaseKEVEPSS 97.3%Aug 10, 2026
High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityCVE-2021-41277 · metabase · metabase · CISA KEV · CVE.org · FIRST EPSS · MetabaseKEVEPSS 97.2%Nov 17, 2021