Synced 02 Nov 2026 13:39 UTC Account

Is Metabase 0.28.6 patched?

Metabase · cycle 0.28 · end of life
0.28.616/100End of life

Current stable (0.64.4.2): 31/100

Minimum safe version1.58.24

0.28.6 has 5 open critical-or-high vulnerabilities. Run 1.58.24 or later to clear them. See what 1.58.24 fixes →

Upgrade impact: Major upgrade. Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.

Health score16/100
Open issues10
Exploited now0
Cycle 0.28 EOL—
Latest release0.64.4.2

Summary iPlain-English security status for Metabase 0.28.6, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Metabase 0.28.6 is part of the 0.28 release line. 10 known vulnerabilities affect it. The minimum safe version is 1.58.24 — upgrade to it or later to clear the open critical/high issues. The latest supported Metabase release is 0.64.4.2.

Known issues affecting 0.28.6

Exploited first, then by exploitation probability.

CVE-2023-38646 CRITICAL EPSS 99% → fixed in 1.46.6.1 CVE-2023-37470 CRITICAL EPSS 1% → fixed in 1.46.6.4 CVE-2018-0697 MEDIUM EPSS 1% → see advisory CVE-2022-43776 MEDIUM EPSS 1% → fixed in 0.44.5 CVE-2026-33725 HIGH EPSS 1% → fixed in 1.59.4 CVE-2023-32680 MEDIUM EPSS 1% → fixed in 1.46.3 CVE-2023-23628 MEDIUM EPSS 0% → fixed in 1.45.2.1 CVE-2023-23629 MEDIUM EPSS 0% → fixed in 1.45.2.1 CVE-2026-27464 HIGH EPSS 0% → fixed in 1.58.7 CVE-2026-22805 HIGH EPSS 0% → fixed in 1.56.3

Other Metabase versions

Check another release line of Metabase.

Metabase 0.64.4.2Metabase 0.63.22Metabase 0.62.19.5Metabase 0.61.21.1Metabase 0.60.27Metabase 0.59.31.1Metabase 0.58.38Metabase 0.57.20Metabase 0.56.25.1Metabase 0.55.24.1Metabase 0.54.24Metabase 0.53.18.1Metabase 0.52.17.1Metabase 0.51.14Metabase 0.50.36Metabase 0.49.25.2Metabase 0.48.13Metabase 0.47.13Metabase 0.46.8Metabase 0.45.4.3Metabase 0.44.7.3Metabase 0.43.7.3Metabase 0.42.6Metabase 0.41.9Metabase 0.40.8Metabase 0.39.7Metabase 0.38.6Metabase 0.37.12Metabase 0.36.12Metabase 0.35.6Metabase 0.34.3Metabase 0.33.7.3Metabase 0.32.10Metabase 0.31.3Metabase 0.30.4Metabase 0.29.3Metabase 0.27.2Metabase 0.26.2Metabase 0.25.2Metabase 0.24.2Metabase 0.23.1Metabase 0.22.2Metabase 0.21.1Metabase 0.20.3Metabase 0.19.3Metabase 0.18.1Metabase 0.17.1Metabase 0.16.1Metabase 0.15.1Metabase 0.14.1Metabase 0.13.3Metabase 0.12.1Metabase 0.11.3Metabase 0.10.4.1Metabase 0.9.3

Frequently asked

Is Metabase 0.28.6 patched?

Metabase 0.28.6 is end-of-life and no longer receives security patches. Move to 0.64.4.2.

What version should I upgrade Metabase 0.28.6 to?

Upgrade Metabase 0.28.6 to at least 1.58.24 to clear its 5 open critical-or-high vulnerabilities.

What is the latest version of Metabase?

The latest supported Metabase release is 0.64.4.2.

Is Metabase 0.28.6 still receiving security updates?

No — Metabase 0.28.6 is on the 0.28 line, which reached end-of-life and no longer receives security updates. Upgrade to 0.64.4.2 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Metabase's official advisory before you patch or upgrade.