org.apache.dolphinscheduler:dolphinscheduler-alert-server (>=3.0.0, <=3.0.1), org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0, <=3.0.1) +10 more potentially affected by CVE-2025-62188 via org.apache.dolphinscheduler:dolphinscheduler-common (>=3.0.0, <=3.0.1)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2025-62188 Source advisory: MEND:CVE-2025-62188...

Improper Certificate Validation

org.apache.dolphinscheduler: dolphinscheduler-common is vulnerable to Improper Certificate Validation. The vulnerability is due to a lack of certificate verification in the HttpUtils class. This allows an attacker to perform a Man-in-the-Middle MITM attack by impersonating the server...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.2.0), org.apache.dolphinscheduler:dolphinscheduler-api (1.2.0) +2 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.2.0)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.2.0 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.0), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.0) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.0)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.0 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.1), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.1) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.1)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.1 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.2), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.2) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.2)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.2 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.3), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.3) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.3)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.3 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.4), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.4) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.4)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.4 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.5), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.5) +4 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.5)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.5 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.6), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.6) +5 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.6)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.6 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.7), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.7) +5 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.7)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.7 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.8), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.8) +5 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.8)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.8 ...

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.9) +7 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.9)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics...

org.apache.dolphinscheduler:dolphinscheduler-alert (2.0.0-alpha), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.0-alpha) +6 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.0-alpha)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert...

org.apache.dolphinscheduler:dolphinscheduler-alert (2.0.0), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.0) +6 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.0)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 2.0.0 ...

org.apache.dolphinscheduler:dolphinscheduler-alert-server (2.0.1), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.1) +6 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.1)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert-server...

org.apache.dolphinscheduler:dolphinscheduler-alert-server (2.0.2), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.2) +7 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.2)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert-server...

org.apache.dolphinscheduler:dolphinscheduler-alert-server (2.0.3), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.3) +7 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.3)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert-server...

org.apache.dolphinscheduler:dolphinscheduler-alert-server (2.0.4), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.4) +7 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.4)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert-server...

org.apache.dolphinscheduler:dolphinscheduler-alert-server (2.0.5), org.apache.dolphinscheduler:dolphinscheduler-api (2.0.5) +7 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (2.0.5)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert-server...