678 matches found
com.databricks:automatedml_2.11 (0.7.2), com.github.aishfenton:vegas-flink_2.11 (0.3.4) +11 more potentially affected by CVE-2025-59840 via org.webjars.bower:vega (>=1.5.4, <=3.0.0-rc4)
org.webjars.bower:vega MAVEN version =1.5.4, =0.3.6, =0.3.6, =0.3.6, =1.1.0, =2.1.0, =1.0.10, =2.0.1 Source cves: CVE-2025-59840 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-13961288...
CVE-2025-41116
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-41116
CVE-2025-41116 affects Grafana Databricks Datasource Plugin. When Oauth passthrough is enabled and multiple users share a single Grafana instance/datasource, the wrong user identifier can be used, potentially returning data the viewer is not authorized to see. Affected versions: 1.6.0 up to, but ...
CVE-2025-41116 Incorrect oauth passthrough in Grafana Snowflake Datasource
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-41116 Incorrect oauth passthrough in Grafana Databricks Datasource
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
Incorrect OAuth Passthrough in Grafana Databricks Datasource
Grafana is an open-source platform for monitoring and observability. The Grafana-Databricks-Datasource is a plugin allowing Grafana to visualize data from Databricks Enterprise Versions between 1.6.0 and 1.12.0 are vulnerable to a bug when Oauth passthrough is enabled, and multiple users are usin...
CVE-2025-41116: Improper Isolation or Compartmentalization
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
PT-2025-46532
Name of the Vulnerable Software and Affected Versions Grafana Databricks Datasource Plugin versions 1.12.1 through 1.12.0 Description The Grafana Databricks Datasource Plugin has an issue where, with Oauth passthrough enabled, multiple users sharing a single Grafana instance and datasource may...
Grafana Databricks Datasource Plugin security vulnerabilities
Grafana Databricks Datasource Plugin is an open source datasource connection plugin for Grafana. A security vulnerability exists in Grafana Databricks Datasource Plugin version 1.12.1 through versions prior to 1.12.0, which stems from the incorrect use of user identifiers when Oauth passthrough i...
databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-11201 via mlflow (>=3.0.0rc2, <=3.0.0rc3)
mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-11201 Source advisory: OSV:GHSA-5CVJ-7RG6-JGGJ...
databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-11201 via mlflow (>=3.0.0rc2, <=3.0.0rc3)
mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-11201 Source advisory: GHSA-5CVJ-7RG6-JGGJ...
databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-11201 via mlflow (>=3.0.0rc2, <=3.0.0rc3)
mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-11201 Source advisory: SNYK:PYTHON-MLFLOW-13774699...
EUVD-2025-25589
Malicious code in bioql PyPI...
EUVD-2024-3598
Malicious code in bioql PyPI...
architxt (0.3.1), autonomize-ml-observability (>=1.1.0b1, <=1.2.7) +33 more potentially affected by CVE-2025-10279 via mlflow (>=3.0.0rc2, <=3.3.2)
mlflow PYPI version =3.0.0rc2, =1.1.0b1, =0.0.1, =1.0.17.1, =1.23.0, =0.1.0, =0.0.1rc1, =2.5.0, =0.2.1, =0.0.1, =0.0.1, =25.7.1, =0.5.0.0, =0.1.2, =0.4.9 - iapytoo 0.1.2 and more Source cves: CVE-2025-10279 Source advisory: SNYK:PYTHON-MLFLOW-15170849...
CVE-2025-53763
Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-53763
Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-53763
The CVE-2025-53763 entry concerns Azure Databricks with an improper access control issue that can allow an unauthenticated, network-based attacker to elevate privileges. Affected component is Azure Databricks (per multiple sources), with root cause described as access control misconfiguration ena...