349 matches found
CVE-2026-44501 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...
CVE-2026-44501 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECTURL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization o...
PT-2026-40949
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend datahub-frontend-react deserializes attacker-controlled Java objects from the REDIRECT URL HTTP cookie during the OIDC callback flow, with no integrity protection no HMAC, no encryption. This is a Deserialization ...
GHSA-MQCG-5X36-VFCG vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips...
CVE-2026-44243 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx...
GHSA-7545-FCXQ-7J24 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx...
CVE-2026-42557 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips...
GHSA-24QX-W28J-9M6P vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
CVE-2026-40110 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
CVE-2026-35397 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
GHSA-37W4-HWHX-4RC4 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
CVE-2026-40934 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
CVE-2026-42266 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
GHSA-QH7Q-6QM3-653W vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
GHSA-5MRQ-X3X5-8V8F vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
GHSA-5789-5FC7-67V3 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
CVE-2025-61669 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...
CVE-2026-41425 vulnerabilities
Vulnerabilities for packages: mlflow, datahub-ingestion-fips, open-webui, airflow, datahub-ingestion, pgadmin4-fips...
GHSA-MWH4-6H8G-PG8W vulnerabilities
Vulnerabilities for packages: authentik-fips, dask-kubernetes, airflow-core, open-webui, kserve, tritonserver-backend-vllm-cuda-12.9, metaflow-service, tritonserver-backend-vllm-cuda-13.0, datahub-ingestion-fips, request-1276, litellm, datahub-ingestion, py3.13-scanner-test-libraries-aiohttp,...
GHSA-3WQ7-RQQ7-WX6J vulnerabilities
Vulnerabilities for packages: authentik-fips, dask-kubernetes, airflow-core, open-webui, kserve, tritonserver-backend-vllm-cuda-12.9, metaflow-service, tritonserver-backend-vllm-cuda-13.0, datahub-ingestion-fips, request-1276, litellm, datahub-ingestion, py3.13-scanner-test-libraries-aiohttp,...