org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.9), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.9) +1 more potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.9)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.9 -...

CVE-2026-32966

The CVE affects Apache DolphinScheduler prior to 3.4.2. A missing authorization check in the DataSource API allows exposure of arbitrary data source metadata to unauthenticated users, enabling potential disclosure of sensitive information. The issue’s root cause is insufficient access control on ...

CVE-2026-32966

creationtimestamp| type| source ---|---|--- 2026-06-17 02:08:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moha5qb4tj2c 2026-06-17 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moj64wrdex2s 2026-06-22 00:40:04+00:00| seen|...