CVE-2026-61576 - Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
CVE ID :CVE-2026-61576 Published : Oct. 29, 2026, 9:17 p.m. | 42 minutes ago Description :Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook` has no authentication...