org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.6), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.6) +1 more potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.6)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.6 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.5), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.5) +1 more potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.5)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.5 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.5), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.5) +1 more potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.5)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.5 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-32967 Source advisory: OSV:GHSA-85G9-8J9G-P486...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.9), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.9) +1 more potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.9)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.9 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.6), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.6) +1 more potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.6)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.6 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.4), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.4) +1 more potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.4)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.4 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.4), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.4) +1 more potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.4)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.4 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-32966 Source advisory: GHSA-R989-CJHX-3V49...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-32967 Source advisory: GHSA-85G9-8J9G-P486...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.2), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.2) +1 more potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.2)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.2 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.9), org.apache.dolphinscheduler:dolphinscheduler-python (2.0.9) +1 more potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (2.0.9)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-api and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-dist 2.0.9 -...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-47340 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-47340 Source advisory: SNYK:JAVA-ORGAPACHEDOLPHINSCHEDULER-17367597...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-41280 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-41280 Source advisory: SNYK:JAVA-ORGAPACHEDOLPHINSCHEDULER-17398202...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to missing permission checks in the /v2 interface. An attacker can gain unauthorized access to restricted resources by sending crafted requests to this endpoint. Remediation Upgrade...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-32967 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-32967 Source advisory: SNYK:JAVA-ORGAPACHEDOLPHINSCHEDULER-17398205...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-32966 Source advisory: SNYK:JAVA-ORGAPACHEDOLPHINSCHEDULER-17398200...

org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0-alpha, <=3.0.6) potentially affected by CVE-2026-42357 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.0.0-alpha, =3.3.2, =3.0.0-alpha, =3.0.6 Source cves: CVE-2026-42357 Source advisory: SNYK:JAVA-ORGAPACHEDOLPHINSCHEDULER-17398199...

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-dist (>=2.0.0-alpha, <=3.4.1) +2 more potentially affected by CVE-2026-47340 via org.apache.dolphinscheduler:dolphinscheduler-api (>=1.3.9, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =1.3.9, =1.1.0, =2.0.0-alpha, =2.0.2, =1.3.9, =3.0.6 Source cves: CVE-2026-47340 Source advisory: MEND:CVE-2026-47340...

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-dist (>=2.0.0-alpha, <=3.4.1) +2 more potentially affected by CVE-2026-32966 via org.apache.dolphinscheduler:dolphinscheduler-api (>=1.3.9, <=3.4.1)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =1.3.9, =1.1.0, =2.0.0-alpha, =2.0.2, =1.3.9, =3.0.6 Source cves: CVE-2026-32966 Source advisory: MEND:CVE-2026-32966...