Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Openmetadata HIGH 7.6
CVE-2026-26010

OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-b…

Fix: 1.11.8+
Fix from $1,950 2026-02-11
Openmetadata HIGH 7.2
CVE-2026-22244

OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SST…

Fix: 1.11.4+
Fix from $1,950 2026-01-08
Openmetadata MEDIUM 6.5
CVE-2025-50467

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitio…

Fix: after 1.4.4
Fix from $1,600 2025-08-08
Openmetadata MEDIUM 6.5
CVE-2025-50468

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO i…

Fix: after 1.4.4
Fix from $1,600 2025-08-08
Openmetadata HIGH 8.8
CVE-2025-50465

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitio…

Fix: after 1.4.4
Fix from $1,950 2025-08-08
Openmetadata MEDIUM 6.5
CVE-2025-50466

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitio…

Fix: after 1.4.4
Fix from $1,600 2025-08-08
Openmetadata HIGH 8.8
CVE-2024-55238

OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO i…

Fix: after 1.4.1
Fix from $1,950 2025-04-17
Openmetadata CRITICAL 9.8
CVE-2024-28255EPSS 73%

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seaml…

Fix: 1.2.4+
Fix from $2,300 2024-03-15
Openmetadata HIGH 8.8
CVE-2024-28254EPSS 46%

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seaml…

Fix: 1.2.4+
Fix from $1,950 2024-03-15
Openmetadata HIGH 8.8
CVE-2024-28847

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seaml…

Fix: 1.2.4+
Fix from $1,950 2024-03-15
Openmetadata HIGH 8.8
CVE-2024-28848EPSS 8%

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seaml…

Fix: 1.2.4+
Fix from $1,950 2024-03-15
Openmetadata HIGH 8.8
CVE-2024-28253EPSS 13%

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seaml…

Fix: 1.3.1+
Fix from $1,950 2024-03-15