CVE-2026-44501 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

CVE-2026-44501 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...

PT-2026-40949

DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECT URL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization ...

GHSA-MQCG-5X36-VFCG vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips...

CVE-2026-44243 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, awx...

GHSA-7545-FCXQ-7J24 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, awx...

CVE-2026-42557 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips...

GHSA-24QX-W28J-9M6P vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

CVE-2026-40110 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

CVE-2026-35397 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

GHSA-37W4-HWHX-4RC4 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

CVE-2026-40934 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

CVE-2026-42266 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

GHSA-QH7Q-6QM3-653W vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

GHSA-5MRQ-X3X5-8V8F vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

GHSA-5789-5FC7-67V3 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

CVE-2025-61669 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

CVE-2026-41425 vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion-fips, open-webui, airflow, datahub-ingestion, pgadmin4-fips...

GHSA-MWH4-6H8G-PG8W vulnerabilities

Vulnerabilities for packages: authentik-fips, dask-kubernetes, airflow-core, open-webui, kserve, tritonserver-backend-vllm-cuda-12.9, metaflow-service, tritonserver-backend-vllm-cuda-13.0, datahub-ingestion-fips, request-1276, litellm, datahub-ingestion, py3.13-scanner-test-libraries-aiohttp,...

GHSA-3WQ7-RQQ7-WX6J vulnerabilities

Vulnerabilities for packages: authentik-fips, dask-kubernetes, airflow-core, open-webui, kserve, tritonserver-backend-vllm-cuda-12.9, metaflow-service, tritonserver-backend-vllm-cuda-13.0, datahub-ingestion-fips, request-1276, litellm, datahub-ingestion, py3.13-scanner-test-libraries-aiohttp,...