| Package | Affected versions | Patched versions |
|---|---|---|
| lightdash | < 0.510.3 | 0.510.3 |
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free