getredash/redash
master@ e170795Fixes13
CVEs20
Peak severityCritical
Commits6,520
Regression coverage72.7%
Highlights
Authorization Bypass: 4 prior fixes. Scrutinize any change in this area.
redash/authentication/__init__.py: most-fixed (2 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Open Redirect: 2 historical fix(es) link redash/authentication/__init__.py to Open Redirect.
Arbitrary File Access: 1 historical fix(es) link redash/query_runner/duckdb.py to Arbitrary File Access.
Authentication Bypass: 1 historical fix(es) link redash/authentication/ldap_auth.py to Authentication Bypass.
Last analyzed 5 Oct 2026, 01:38 UTC