Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authenticated users to create API data connections with arbitrary URLs. The server fetches these URLs using request-promise without any IP address validation, enabling Server-Side Request Forgery attacks against internal networks and cloud metadata endpoints. This vulnerability is fixed in 4.8.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30232 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authen… https://www.cve.org/CVERecord?id=CVE-2026-30232
Post summary
The message merely notes that CVE‑2026‑30232 applies to Chartbrew versions prior to 4.8.5, without presenting any proof‑of‑concept, exploit details, or mitigation guidance.
CVE-2026-30232 Server-Side Request Forgery in Chartbrew Prior to Version 4.8.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30232
Post summary
The tweet announces CVE‑2026‑30232, a Server‑Side Request Forgery flaw in Chartbrew versions prior to 4.8.5, providing basic technical details but no PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | depomo | chartbrew | - | - | - |