356 matches found
CVE-2026-34516 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, text-generation-inference, open-webui, datahub-ingestion, litellm, metaflow-service-fips, awx, airflow, checkov, keep, kserve, authentik, authentik-fips, keep-fips, request-1276,...
CVE-2026-34517 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, text-generation-inference, open-webui, datahub-ingestion, litellm, metaflow-service-fips, awx, airflow, checkov, keep, kserve, authentik, authentik-fips, keep-fips, request-1276,...
GHSA-M5QP-6W8W-W647 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, text-generation-inference, open-webui, datahub-ingestion, litellm, metaflow-service-fips, awx, airflow, checkov, keep, kserve, authentik, authentik-fips, keep-fips, request-1276,...
GHSA-P998-JP59-783M vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, text-generation-inference, open-webui, datahub-ingestion, litellm, metaflow-service-fips, awx, airflow, checkov, keep, kserve, authentik, authentik-fips, keep-fips, request-1276,...
GHSA-GC5V-M9X4-R6X2 vulnerabilities
Vulnerabilities for packages: pypy-3.10, dbt-snowflake, py3-pipenv, ggshield, emissary, gitlab-cng-fips, gitlab-cng, tritonserver-backend-vllm-cuda-12.9, ansible-operator-fips, apache-beam-python-3.12-sdk, openstack-kolla-toolbox-2025.2, text-generation-inference, prefect, open-webui, superset, a...
CVE-2026-25645 vulnerabilities
Vulnerabilities for packages: pypy-3.10, dbt-snowflake, py3-pipenv, ggshield, emissary, gitlab-cng-fips, gitlab-cng, tritonserver-backend-vllm-cuda-12.9, ansible-operator-fips, apache-beam-python-3.12-sdk, openstack-kolla-toolbox-2025.2, text-generation-inference, prefect, open-webui, superset, a...
CVE-2026-25644
DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...
CVE-2026-25644
DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...
CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade
DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...
CVE-2026-25644
DataHub (open-source metadata platform) is affected by CVE-2026-25644 through the LDAP ingestion source. Prior to version 1.3.1.8, it is vulnerable to a MITM attack via TLS downgrade. The issue has been patched in DataHub 1.3.1.8. Public sources from NVD/Red Hat confirm the vulnerability and the ...
CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade
DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...
CVE-2026-25644 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade
DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8...
WordPress OS DataHub Maps plugin <= 1.8.3 - Authenticated (Author+) Arbitrary File Upload vulnerability
Authenticated Author+ Arbitrary File Upload vulnerability discovered by Williwollo CybrX in WordPress Plugin OS DataHub Maps versions = 1.8.3...
PT-2026-6808
Name of the Vulnerable Software and Affected Versions DataHub versions prior to 1.3.1.8 Description DataHub, an open-source metadata platform, has an issue in its LDAP ingestion source. Specifically, versions before 1.3.1.8 are susceptible to a man-in-the-middle MITM attack due to a TLS downgrade...
DataHub 信任管理问题漏洞
DataHub is a metadata platform for a modern data stack, open-sourced by the datahub-project. Versions of DataHub prior to 1.3.1.8 contained a vulnerability related to trust management. This vulnerability stemmed from the LDAP intake source being vulnerable to man-in-the-middle attacks carried out...
CVE-2026-1730
The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OSDataHubMapsAdmin::addfileandext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2026-1730 OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arbitrary File Upload
The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OSDataHubMapsAdmin::addfileandext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and...
EUVD-2026-5276
The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OSDataHubMapsAdmin::addfileandext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2026-1730
The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OSDataHubMapsAdmin::addfileandext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2026-1730 OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arbitrary File Upload
The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OSDataHubMapsAdmin::addfileandext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and...