org.open-metadata:openmetadata-dist (0.13.2-beta) potentially affected by CVE-2024-28848 via org.open-metadata:openmetadata-service (0.13.2-beta)

org.open-metadata:openmetadata-service MAVEN version 0.13.2-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.2-beta Source cves: CVE-2024-28848...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.2.3) potentially affected by CVE-2024-28848 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.2.3)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.2.3 Source cves: CVE-2024-28848 Source advisory: OSV:GHSA-5XV3-FM7G-865R...

org.open-metadata:openmetadata-dist (0.12.1) potentially affected by CVE-2024-28848 via org.open-metadata:openmetadata-service (0.12.1)

org.open-metadata:openmetadata-service MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.1 Source cves: CVE-2024-28848 Source...

org.open-metadata:openmetadata-dist (0.13.1) potentially affected by CVE-2024-28848 via org.open-metadata:openmetadata-service (0.13.1)

org.open-metadata:openmetadata-service MAVEN version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.1 Source cves: CVE-2024-28848 Source...

org.open-metadata:openmetadata-dist (0.12.1.preview), org.open-metadata:openmetadata-ui (0.12.1.preview) potentially affected by CVE-2024-28848 via org.open-metadata:openmetadata-service (0.12.1.preview)

org.open-metadata:openmetadata-service MAVEN version 0.12.1.preview is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.1.preview -...

OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)

SpEL Injection in PUT /api/v1/events/subscriptions GHSL-2023-251 Please note, only authenticated users have access to PUT / POST APIS for /api/v1/policies. Non authenticated users will not be able to access these APIs to exploit the vulnerability. A user must exist in OpenMetadata and have...

org.open-metadata:openmetadata-dist (0.13.2) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (0.13.2)

org.open-metadata:openmetadata-service MAVEN version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.2 Source cves: CVE-2024-28847 Source...

org.open-metadata:openmetadata-dist (0.12.1) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (0.12.1)

org.open-metadata:openmetadata-service MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.1 Source cves: CVE-2024-28847 Source...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.2.3) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.2.3)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.2.3 Source cves: CVE-2024-28847 Source advisory: GHSA-8P5R-6MVV-2435...

org.open-metadata:openmetadata-dist (0.12.2) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (0.12.2)

org.open-metadata:openmetadata-service MAVEN version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.2 Source cves: CVE-2024-28847 Source...

org.open-metadata:openmetadata-dist (0.12.2-republished) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (0.12.2-republished)

org.open-metadata:openmetadata-service MAVEN version 0.12.2-republished is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.2-republished Source cves:...

org.open-metadata:openmetadata-dist (0.13.2-beta) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (0.13.2-beta)

org.open-metadata:openmetadata-service MAVEN version 0.13.2-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.2-beta Source cves: CVE-2024-28847...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.2.3) potentially affected by CVE-2024-28847 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.2.3)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.2.3 Source cves: CVE-2024-28847 Source advisory: OSV:GHSA-8P5R-6MVV-2435...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.3.0) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.3.0)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.3.0 Source cves: CVE-2024-28253 Source advisory: GHSA-7VF4-X5M2-R6GR...

org.open-metadata:openmetadata-dist (0.13.1) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (0.13.1)

org.open-metadata:openmetadata-service MAVEN version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.1 Source cves: CVE-2024-28253 Source...

org.open-metadata:openmetadata-dist (0.13.2) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (0.13.2)

org.open-metadata:openmetadata-service MAVEN version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.2 Source cves: CVE-2024-28253 Source...

org.open-metadata:openmetadata-dist (0.12.2) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (0.12.2)

org.open-metadata:openmetadata-service MAVEN version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.2 Source cves: CVE-2024-28253 Source...

org.open-metadata:openmetadata-dist (0.13.2-beta) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (0.13.2-beta)

org.open-metadata:openmetadata-service MAVEN version 0.13.2-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.13.2-beta Source cves: CVE-2024-28253...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.3.0) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.3.0)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.3.0 Source cves: CVE-2024-28253 Source advisory: OSV:GHSA-7VF4-X5M2-R6GR...

org.open-metadata:openmetadata-dist (demo_beta1) potentially affected by CVE-2024-28253 via org.open-metadata:openmetadata-service (demo_beta1)

org.open-metadata:openmetadata-service MAVEN version demobeta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist demobeta1 Source cves: CVE-2024-28253 Sourc...