Is Metabase 0.64.4.2 patched?
0.64.4.2 has 5 open critical-or-high vulnerabilities. Run 1.58.24 or later to clear them. See what 1.58.24 fixes →
Upgrade impact: Major upgrade. Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.
Summary iPlain-English security status for Metabase 0.64.4.2, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Metabase 0.64.4.2 is part of the 0.64 release line. 5 known vulnerabilities affect it. The minimum safe version is 1.58.24 — upgrade to it or later to clear the open critical/high issues. The 0.64 line is supported until 2027-12-01. The latest supported Metabase release is 0.64.4.2.
Known issues affecting 0.64.4.2
Exploited first, then by exploitation probability.
CVE-2023-38646 CRITICAL EPSS 99% → fixed in 1.46.6.1 CVE-2023-37470 CRITICAL EPSS 1% → fixed in 1.46.6.4 CVE-2026-33725 HIGH EPSS 1% → fixed in 1.59.4 CVE-2026-27464 HIGH EPSS 0% → fixed in 1.58.7 CVE-2026-22805 HIGH EPSS 0% → fixed in 1.56.3Other Metabase versions
Check another release line of Metabase.
Frequently asked
Is Metabase 0.64.4.2 patched?
Metabase 0.64.4.2 has 5 open critical-or-high vulnerabilities. The minimum safe version is 1.58.24 — upgrade to 1.58.24 or later to clear them.
What version should I upgrade Metabase 0.64.4.2 to?
Upgrade Metabase 0.64.4.2 to at least 1.58.24 to clear its 5 open critical-or-high vulnerabilities.
When does Metabase 0.64 reach end-of-life?
Metabase 0.64 is supported until 2027-12-01.
What is the latest version of Metabase?
The latest supported Metabase release is 0.64.4.2.
Is Metabase 0.64.4.2 still receiving security updates?
Yes — the 0.64 line is still supported until 2027-12-01 and receiving security updates.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Metabase's official advisory before you patch or upgrade.