{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/metabase-enterprise--1.64.3.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Metabase (\u003c 0.64.3.4)","Metabase Pro (\u003c 1.64.3.4)","Metabase Enterprise (\u003c 1.64.3.4)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","webserver","informational"],"_cs_type":"advisory","_cs_vendors":["Metabase"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified in Metabase. The vendor has released security patches to address these issues, which were disclosed in GHSA-v44v-x8x4-mvcw. The nature of the vulnerabilities remains undisclosed by the manufacturer. Users must upgrade to versions 0.64.3.4 (open-source) or 1.64.3.4 (Pro/Enterprise) to remediate the potential security risk.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of Metabase in the environment and determine if they are running a version prior to 0.64.3.4 or 1.64.3.4.\u003c/li\u003e\n\u003cli\u003eApply the updates to Metabase, Metabase Pro, and Metabase Enterprise to reach version 0.64.3.4 or 1.64.3.4 immediately.\u003c/li\u003e\n\u003cli\u003eReview the vendor's security advisory GHSA-v44v-x8x4-mvcw for any additional post-patch configuration requirements.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T17:43:39Z","date_published":"2026-10-28T17:43:39Z","id":"https://feed.craftedsignal.io/briefs/2026-10-metabase-vulnerabilities/","summary":"Metabase has released security updates for multiple unspecified vulnerabilities affecting Pro, Enterprise, and open-source editions, requiring an upgrade to version 0.64.3.4 or 1.64.3.4.","title":"Metabase: Multiple vulnerabilities in Pro, Enterprise, and open-source versions","url":"https://feed.craftedsignal.io/briefs/2026-10-metabase-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Metabase Enterprise (\u003c 1.64.3.4)","version":"https://jsonfeed.org/version/1.1"}