data-infra has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.7 (medium).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 5.7
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

CWE-639 2

Products

cube-studio 2

Follow data-infra:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

data-infra vulnerabilities

CVEs affecting data-infra, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-111671High· 7.1

2w ago

Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id

Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to l…

▾ Twilightdata-infra · cube-studioEPSS 0.31%via NVD

CVE-2026-111672Medium· 4.3PoC

2w ago

Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id

Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipel…

▾ Twilightdata-infra · cube-studioEPSS 0.33%via NVD