data-infra has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.7 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- cube-studio 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
data-infra vulnerabilities
CVEs affecting data-infra, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111671High· 7.1Cube-studio through 2026.09.01 IDOR via Notebook and Serving Lifecycle Endpoints
Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to l…
▾ Twilightdata-infra · cube-studiovia CVEORG
CVE-2026-111672Medium· 4.3PoCCube-studio through 2026.09.01 IDOR via Pipeline View and Copy Endpoints
Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipel…
▾ Twilightdata-infra · cube-studiovia CVEORG