Vulnerabilities

TI-2026-32435 CVE-2026-44501

DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

LOW 30

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00139 Published 2026-05-14 Fixed in 1.5.0.3 CWE-502

TI-2026-20744 CVE-2026-25644

LOW 39

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00337 Published 2026-02-06 Fixed in 1.3.1.8 CWE-295

TI-2024-19219 CVE-2024-29037

MEDIUM 48

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00605 Published 2024-03-20 Fixed in 0.2.182 CWE-1394

TI-2023-10860 CVE-2023-25557

MEDIUM 46

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00684 Published 2023-02-10 Fixed in 0.8.45 CWE-918

TI-2023-10862 CVE-2023-25559

LOW 38

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.0052 Published 2023-02-10 Fixed in 0.8.45 CWE-287

TI-2023-10863 CVE-2023-25560

MEDIUM 44

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2023-02-10 Fixed in 0.8.45 CWE-913

TI-2023-10864 CVE-2023-25561

MEDIUM 43

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00392 Published 2023-02-10 Fixed in 0.8.45 CWE-755

TI-2023-10865 CVE-2023-25562

MEDIUM 43

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00372 Published 2023-02-10 Fixed in 0.8.45 CWE-613

TI-2022-18740 CVE-2022-39366 · GHSA-r8gm-v65f-c973

HIGH 82

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.01113 Published 2022-10-28 Fixed in 0.8.45 CWE-287