Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-61743

Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation

CVSS 3.1 6.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-61743

Published

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's server/modules/safeRequest.js calls validateOutboundUrl() to resolve and validate a target hostname, but request-promise performs a separate DNS resolution for the actual connection. An authenticated user who can create or test API connections and controls the target DNS name can return a public address during validation and a private address during the request, bypassing the protections implemented by server/modules/outboundTargetPolicy.js. This DNS rebinding condition can expose internal services, localhost resources, or cloud metadata endpoints. This issue is fixed in version 5.2.2.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-61743

Published

chartbrew

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "chartbrew",
                    "product": "chartbrew",
                    "versions": [
                        {
                            "version": "< 5.2.2",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON