Browse CVEs

HIGH 7.1 CVE-2026-44501 DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java ob… Datahub 1.5.0.3+ Fix from $1,9502026-05-14 HIGH 7.5 CVE-2026-25644 DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. … Datahub 1.3.1.8+ Fix from $1,9502026-02-06 CRITICAL 9.1 CVE-2024-29037 datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and … Datahub Helm 0.2.182+ Fix from $2,3002024-03-20 CRITICAL 9.8 CVE-2023-25560 DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resettin… Datahub 0.8.45+ Fix from $2,3002023-02-11 CRITICAL 9.8 CVE-2023-25561 DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service (JAAS) authentication and t… Datahub 0.8.45+ Fix from $2,3002023-02-11 CRITICAL 9.8 CVE-2023-25562 DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on new sign-in events and not on… Datahub 0.8.45+ Fix from $2,3002023-02-11 CRITICAL 9.1 CVE-2023-25557 DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL requests to the backend. The go… Datahub 0.8.45+ Fix from $2,3002023-02-11 HIGH 8.1 CVE-2023-25559 DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the default configuration, the Metadata… Datahub 0.8.45+ Fix from $1,9502023-02-11 CRITICAL 9.8 CVE-2022-39366 DataHub is an open-source metadata platform. Prior to version 0.8.45, the `StatelessTokenService` of the DataHub metadata service (GMS) does not veri… Datahub 0.8.45+ Fix from $2,3002022-10-28