iflow-mcp-redhat-data-and-ai-template-mcp-server (0.1.0), mcp-server-datahub (>=0.3.0, <=0.3.4) +2 more potentially affected by CVE-2026-32871 via fastmcp (2.10.4)

fastmcp PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-redhat-data-and-ai-template-mcp-server 0.1.0 - mcp-server-datahub =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2026-32871 Source advisory:...

biocontext-kb (>=0.1.0, <=0.1.1), chatmcp-memory (>=0.0.2, <=0.0.8) +9 more potentially affected by CVE-2026-32871 via fastmcp (2.10.5)

fastmcp PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - biocontext-kb =0.1.0, =0.0.2, =0.0.2, =0.3.5, =1.0.0, =0.9.8, =2.0.2, =0.0.5, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-32871 Source advisory...

biocontext-kb (>=0.1.0, <=0.1.1), chatmcp-memory (>=0.0.2, <=0.0.8) +9 more potentially affected by CVE-2026-27124 via fastmcp (2.10.5)

fastmcp PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - biocontext-kb =0.1.0, =0.0.2, =0.0.2, =0.3.5, =1.0.0, =0.9.8, =2.0.2, =0.0.5, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-27124 Source advisory...

iflow-mcp-redhat-data-and-ai-template-mcp-server (0.1.0), mcp-server-datahub (>=0.3.0, <=0.3.4) +2 more potentially affected by CVE-2026-27124 via fastmcp (2.10.4)

fastmcp PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-redhat-data-and-ai-template-mcp-server 0.1.0 - mcp-server-datahub =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2026-27124 Source advisory:...

iflow-mcp-redhat-data-and-ai-template-mcp-server (0.1.0), mcp-server-datahub (>=0.3.0, <=0.3.4) +2 more potentially affected by CVE-2025-64340 via fastmcp (2.10.4)

fastmcp PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-redhat-data-and-ai-template-mcp-server 0.1.0 - mcp-server-datahub =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2025-64340 Source advisory:...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: dbt-core, datadog-agent-fips, dask-kubernetes, openstack-kolla-toolbox-2025.2, checkov, nvidia-nsight-compute-13.3, opal, kubeflow-volumes-web-app, prefect-fips, graalvm, pypy-3.10, kubeflow-katib, keep, label-studio, openstack-kolla-toolbox-2026.1, datahub-ingestion...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: dbt-core, datadog-agent-fips, dask-kubernetes, openstack-kolla-toolbox-2025.2, checkov, nvidia-nsight-compute-13.3, opal, kubeflow-volumes-web-app, prefect-fips, graalvm, pypy-3.10, kubeflow-katib, keep, label-studio, openstack-kolla-toolbox-2026.1, datahub-ingestion...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-32597 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) +1 more potentially affected by CVE-2025-69219 via apache-airflow-providers-http (4.10.1)

apache-airflow-providers-http PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-http and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =2.6.0, =2.6.3 Source cves: CVE-2025-69219 Source...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), actinia-core (4.2.0) +682 more potentially affected by CVE-2026-27205 via flask (1.1.4)

flask PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.0rc3, =2022.9.19, =1.0.2, =0.1.1, =0.1.6, =1.0.7, =0.5.1, =0.2.0, =0.1.0, =1.0.0, =1.1.0 and more Sour...

acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=0.15.0rc15), agnostic (1.0.3) +549 more potentially affected by unknown CVE via sqlparse (>=0.1.14, <=0.5.3)

sqlparse PYPI version =0.1.14, =0.14.0.3rc1, =0.2.0, =0.0.1, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.1.0, =0.0.36, =2.1.1.3, =2.1.1.4 - apache-superset-spark 3.1.3 and more Source cves: unknown CVE Source advisory: GHSA-27JP-WM6Q-GP25...

acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=0.15.0rc15), agnostic (1.0.3) +549 more potentially affected by unknown CVE via sqlparse (>=0.1.14, <=0.5.3)

sqlparse PYPI version =0.1.14, =0.14.0.3rc1, =0.2.0, =0.0.1, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.1.0, =0.0.36, =2.1.1.3, =2.1.1.4 - apache-superset-spark 3.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-27JP-WM6Q-GP25...

acryl-datahub (>=0.8.24.2, <=0.11.0.6rc1), acryl-datahub-actions (>=0.0.1rc4, <=0.0.8) +36 more potentially affected by CVE-2025-33042 via avro (>=1.8.2, <=1.11.3)

avro PYPI version =1.8.2, =0.8.24.2, =0.0.1rc4, =0.9.2.2rc0, =0.0.1, =1.0.0b4, =0.9.15, =0.0.2, =0.2.78, =0.15.8, =0.1.0, =0.1.0, =0.3.0, =0.5.0rc1, =1.0.0 and more Source cves: CVE-2025-33042 Source advisory: OSV:PYSEC-2026-26...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-24098 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-24098 Source advisory: OSV:GHSA-5G2W-9F8G-G5Q...

CVE-2026-25644

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...

CVE-2026-25644

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...

CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...

CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...

CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...

CVE-2026-25644

DataHub (open-source metadata platform) is affected by CVE-2026-25644 through the LDAP ingestion source. Prior to version 1.3.1.8, it is vulnerable to a MITM attack via TLS downgrade. The issue has been patched in DataHub 1.3.1.8. Public sources from NVD/Red Hat confirm the vulnerability and the ...