Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Apache DolphinScheduler 3.4.2 Clear all filters
TI-2026-34915 CVE-2026-47340 · GHSA-694g-j8pj-cjj5

Information disclosure in Apache DolphinScheduler

Priority LOW 29

Allow authenticated users to access alert instances associated with alert groups they do not have permission to access.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00434 Published 2026-06-17 Fixed in 3.4.2 CWE-200
TI-2026-29886 CVE-2026-41280 · GHSA-wh3w-v6gj-fqh2

Incorrect authorization in Apache DolphinScheduler

Priority LOW 23

Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00437 Published 2026-06-17 Fixed in 3.4.2 CWE-863