Read the docs

Datahub

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Datahub records in CISA KEV

No Datahub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Datahub 8 records HIGH Datahub-helm 1 record MEDIUM

Records

9 records

TI-2022-18740 CVE-2022-39366 · GHSA-r8gm-v65f-c973

DataHub missing JWT signature check

Priority HIGH 82

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.01113 Published 2022-10-28 Fixed in 0.8.45 CWE-287
TI-2024-19219 CVE-2024-29037

Default secret use for initial deployment

Priority MEDIUM 48

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00605 Published 2024-03-20 Fixed in 0.2.182 CWE-1394
TI-2023-10863 CVE-2023-25560

JSON Injection in DataHub

Priority MEDIUM 44

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2023-02-10 Fixed in 0.8.45 CWE-913
Open these records in search →