356 matches found
GHSA-6R2R-WW24-7H52 vulnerabilities
Vulnerabilities for packages: awx, opal, checkov, datahub-ingestion-fips, datahub-ingestion, mlflow...
CVE-2026-67322 vulnerabilities
Vulnerabilities for packages: awx, opal, checkov, datahub-ingestion-fips, datahub-ingestion, mlflow-fips, mlflow...
CVE-2026-67323 vulnerabilities
Vulnerabilities for packages: awx, opal, checkov, datahub-ingestion-fips, datahub-ingestion, mlflow...
GHSA-M4F3-G4CQ-HQRX vulnerabilities
Vulnerabilities for packages: awx, opal, checkov, datahub-ingestion-fips, datahub-ingestion, mlflow-fips, mlflow...
CVE-2026-67325 vulnerabilities
Vulnerabilities for packages: awx, opal, checkov, datahub-ingestion-fips, datahub-ingestion, mlflow...
GHSA-4VPG-PFJ8-M33Q vulnerabilities
Vulnerabilities for packages: awx, opal, checkov, datahub-ingestion-fips, datahub-ingestion, mlflow...
CVE-2026-50775
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...
CVE-2026-50775
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...
EUVD-2026-60351
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...
PT-2026-76747
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...
CVE-2026-50775
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...
CVE-2026-50775
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...
CVE-2026-50775
DataHub v1.5.0.1 is vulnerable to a blind SSRF flaw where the server fetches images from attacker-supplied URLs, enabling remote code execution without authentication. CVSS 3.1 scores it CRITICAL (9.8), and CISA's SSVC assessment marks it as automatable with total technical impact. No patch versi...
PYSEC-2026-252 acryl-datahub missing JWT signature check
Missing JWT signature check GHSL-2022-078 The StatelessTokenService of the DataHub metadata service GMS does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadata Service authentication is enabled. This vulnerability occurs because...
CVE-2026-55865 vulnerabilities
Vulnerabilities for packages: datahub-ingestion...
GHSA-3J69-69WJ-XQX2 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips, openstack-glance-2025.2, openstack-placement-2025.2-fips, openstack-glance-2025.2-fips, openstack-glance-2025.1, datahub-ingestion, openstack-horizon-2025.1, openstack-horizon-2025.2,...
GHSA-VQ2F-VCC9-J8MV vulnerabilities
Vulnerabilities for packages: datahub-ingestion...
CVE-2026-54911 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips, openstack-glance-2025.2, openstack-placement-2025.2-fips, openstack-glance-2025.2-fips, openstack-glance-2025.1, datahub-ingestion, openstack-horizon-2025.1, openstack-horizon-2025.2,...
CVE-2026-44501
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...