Vulnerabilities

TI-2026-32435 CVE-2026-44501

DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

LOW 30

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00139 Published 2026-05-14 Fixed in 1.5.0.3 CWE-502

TI-2026-20744 CVE-2026-25644

DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

LOW 39

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00337 Published 2026-02-06 Fixed in 1.3.1.8 CWE-295

TI-2024-14983 CVE-2024-22409

Default Privileges allow for high level operations for low privileged users in datahub

HIGH 73

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00652 Published 2024-01-16 Fixed in 0.12.1 CWE-276

TI-2023-25780 CVE-2023-47640

Insecure Use of HMAC-SHA1 For Session Signing in datahub

MEDIUM 40

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2023-11-14 Fixed in 0.11.1 CWE-327

TI-2023-25770 CVE-2023-47628

Session Expiration Misconfiguration in datahub

MEDIUM 55

DataHub is an open-source metadata platform.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00379 Published 2023-11-14 Fixed in 0.12.1 CWE-613

TI-2023-25771 CVE-2023-47629

Privilege escalation through email sign-up in datahub

HIGH 70

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00472 Published 2023-11-14 Fixed in 0.12.1 CWE-269

TI-2023-10860 CVE-2023-25557

Server-Side Request Forgery in DataHub

MEDIUM 46

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00684 Published 2023-02-10 Fixed in 0.8.45 CWE-918

TI-2023-10861 CVE-2023-25558

Deserialization of untrusted data in DataHub

MEDIUM 42

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01034 Published 2023-02-10 Fixed in 0.9.5 CWE-502

TI-2023-10862 CVE-2023-25559

System account impersonation in DataHub

LOW 38

DataHub is an open-source metadata platform.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.0052 Published 2023-02-10 Fixed in 0.8.45 CWE-287

TI-2023-10863 CVE-2023-25560

JSON Injection in DataHub

MEDIUM 44

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2023-02-10 Fixed in 0.8.45 CWE-913

TI-2023-10864 CVE-2023-25561

Login fail open on JAAS misconfiguration in DataHub

MEDIUM 43

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00392 Published 2023-02-10 Fixed in 0.8.45 CWE-755

TI-2023-10865 CVE-2023-25562

Failure to Invalidate Session on Logout in DataHub

MEDIUM 43

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00372 Published 2023-02-10 Fixed in 0.8.45 CWE-613

TI-2022-18740 CVE-2022-39366 · GHSA-r8gm-v65f-c973

DataHub missing JWT signature check

HIGH 82

DataHub is an open-source metadata platform.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.01113 Published 2022-10-28 Fixed in 0.8.45 CWE-287

Vulnerabilities

Filters