What does upgrading Metabase 0.40.8 to 1.58.24 fix?

Upgrading Metabase from 0.40.8 to 1.58.24 clears 9 known vulnerabilities (2 critical, 3 high). No tracked issues remain in 1.58.24.

← Metabase

Metabase: 0.40.8 → 1.58.24

Metabase · upgrade impact

From0.40.89 known issues To1.58.240 known issues

Upgrade impact: Major upgrade. Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.

Fixed by upgrading to 1.58.24 iVulnerabilities that affect 0.40.8 but no longer affect 1.58.24 — the security gain from this upgrade, by exploited status then exploitation probability.

Exploited first, then by exploitation probability (EPSS).

CVE-2023-38646 CRITICAL EPSS 99% ✓ cleared in 1.58.24 CVE-2023-37470 CRITICAL EPSS 1% ✓ cleared in 1.58.24 CVE-2026-33725 HIGH EPSS 1% ✓ cleared in 1.58.24 CVE-2022-43776 MEDIUM EPSS 1% ✓ cleared in 1.58.24 CVE-2023-32680 MEDIUM EPSS 1% ✓ cleared in 1.58.24 CVE-2023-23628 MEDIUM EPSS 0% ✓ cleared in 1.58.24 CVE-2023-23629 MEDIUM EPSS 0% ✓ cleared in 1.58.24 CVE-2026-27464 HIGH EPSS 0% ✓ cleared in 1.58.24 CVE-2026-22805 HIGH EPSS 0% ✓ cleared in 1.58.24