Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Datahub HIGH 7.1
CVE-2026-44501

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java ob…

Fix: 1.5.0.3+
Fix from $1,950 2026-05-14
Datahub HIGH 7.5
CVE-2026-25644

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. …

Fix: 1.3.1.8+
Fix from $1,950 2026-02-06
Datahub Helm CRITICAL 9.1
CVE-2024-29037

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and …

Fix: 0.2.182+
Fix from $2,300 2024-03-20
Datahub CRITICAL 9.8
CVE-2023-25560

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resettin…

Fix: 0.8.45+
Fix from $2,300 2023-02-11
Datahub CRITICAL 9.8
CVE-2023-25561

DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service (JAAS) authentication and t…

Fix: 0.8.45+
Fix from $2,300 2023-02-11
Datahub CRITICAL 9.8
CVE-2023-25562

DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on new sign-in events and not on…

Fix: 0.8.45+
Fix from $2,300 2023-02-11
Datahub CRITICAL 9.1
CVE-2023-25557

DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL requests to the backend. The go…

Fix: 0.8.45+
Fix from $2,300 2023-02-11
Datahub HIGH 8.1
CVE-2023-25559

DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the default configuration, the Metadata…

Fix: 0.8.45+
Fix from $1,950 2023-02-11
Datahub CRITICAL 9.8
CVE-2022-39366

DataHub is an open-source metadata platform. Prior to version 0.8.45, the `StatelessTokenService` of the DataHub metadata service (GMS) does not veri…

Fix: 0.8.45+
Fix from $2,300 2022-10-28