All vulnerabilities

Servers and applications

CVE-2025-5895

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named…

Severity
Low 2.1
Published
9 Jun 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MetabaseServers and applications · cpe:a:metabase:metabase
  • Version 0.54.10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-5895
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-5895