acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) +1 more potentially affected by CVE-2025-69219 via apache-airflow-providers-http (4.10.1)

apache-airflow-providers-http PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-http and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =2.6.0, =2.6.3 Source cves: CVE-2025-69219 Source...

aboutcode-toolkit (>=3.0.0, <=5.1.0), abracadabra (>=0.0.6, <=0.0.7) +1721 more potentially affected by CVE-2025-27516 via jinja2 (2.11.3)

jinja2 PYPI version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aboutcode-toolkit =3.0.0, =0.0.6, =0.8.44.4rc1, =0.1.0rc3, =1.1.5, =0.1.0, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.6.9 and more...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-49487 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-49487 Source advisory: OSV:GHSA-22HF-VX2V-GJF...

acryl-datahub-airflow-plugin (>=0.9.5.1rc1, <=1.3.1.5rc6), acryl-datahub-airflow-plugin-hcc-clean (1.4.0.3.post2) +87 more potentially affected by CVE-2026-49296 via apache-airflow (2.11.2)

apache-airflow PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.4.0, =0.1.0a1, =0.1.1, =0.1.1, =0.10.2, =0.0.1,...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-49296 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-49296 Source advisory: OSV:GHSA-4FH7-7JX4-8F6...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-33264 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-33264 Source advisory: OSV:GHSA-2943-9672-R45...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), airflow-add-ons (0.2.9b2) +8 more potentially affected by CVE-2026-33264 via apache-airflow (2.2.5)

apache-airflow PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.8.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.5.2, =0.8.3a1, =0.2.35, =0.2.37 Source cves:...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-48892 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-48892 Source advisory: OSV:GHSA-9933-5RRP-MFW...

acryl-datahub-airflow-plugin (>=0.9.5.1rc1, <=1.3.1.5rc6), acryl-datahub-airflow-plugin-hcc-clean (1.4.0.3.post2) +87 more potentially affected by CVE-2026-33264 via apache-airflow (2.11.2)

apache-airflow PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.4.0, =0.1.0a1, =0.1.1, =0.1.1, =0.10.2, =0.0.1,...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-48891 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-48891 Source advisory: OSV:GHSA-3322-MJXH-9MP...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-48828 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-48828 Source advisory: OSV:GHSA-563F-2439-RMQ...

acryl-datahub-airflow-plugin (>=0.9.5.1rc1, <=1.3.1.5rc6), acryl-datahub-airflow-plugin-hcc-clean (1.4.0.3.post2) +87 more potentially affected by CVE-2026-48892 via apache-airflow (2.11.2)

apache-airflow PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.4.0, =0.1.0a1, =0.1.1, =0.1.1, =0.10.2, =0.0.1,...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), actinia-core (4.2.0) +696 more potentially affected by CVE-2024-34069 via werkzeug (1.0.1)

werkzeug PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.4.7, =0.1.0rc3, =2022.9.19, =1.0.2, =0.1.1, =0.1.6, =0.5.1, =0.2.0, =1.0.0, =0.0.3, =0.0.4 and mor...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-49487 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-49487 Source advisory: OSV:PYSEC-2026-2088...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-48891 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-48891 Source advisory: OSV:PYSEC-2026-2086...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-48892 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-48892 Source advisory: OSV:PYSEC-2026-2087...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-49296 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-49296 Source advisory: OSV:PYSEC-2026-2083...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-33264 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-33264 Source advisory: OSV:PYSEC-2026-2082...

iflow-mcp-redhat-data-and-ai-template-mcp-server (0.1.0), mcp-server-datahub (>=0.3.0, <=0.3.4) +2 more potentially affected by CVE-2026-32871 via fastmcp (2.10.4)

fastmcp PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-redhat-data-and-ai-template-mcp-server 0.1.0 - mcp-server-datahub =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2026-32871 Source advisory:...

acryl-datahub missing JWT signature check

Missing JWT signature check GHSL-2022-078The StatelessTokenService of the DataHub metadata service GMS does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadata Service authentication is enabled. This vulnerability occurs because...