MEDIUM6.5npm
GHSA-9vph-2hvm-x66g· CVE-2026-25957Cube Core is vulnerable to Denial of Service (DoS) via crafted request
Modified: 2/22/2026
package
npm/@cubejs-backend/server-core
pkg:npm/%40cubejs-backend/server-core
HIGH7.7npm
GHSA-v226-32c7-x2v7· CVE-2026-25958Cube Core is vulnerable to privilege escalation via a specially crafted request
Modified: 2/22/2026