org.apache.dolphinscheduler:dolphinscheduler-log-server (>=3.0.0, <=3.0.1), org.apache.dolphinscheduler:dolphinscheduler-master (>=3.0.0, <=3.0.1) +2 more potentially affected by CVE-2025-62188 via org.apache.dolphinscheduler:dolphinscheduler-server (>=3.0.0, <=3.0.1)

org.apache.dolphinscheduler:dolphinscheduler-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2025-62188 Source advisory: MEND:CVE-2025-62188...

org.apache.dolphinscheduler:dolphinscheduler-api (2.0.2), org.apache.dolphinscheduler:dolphinscheduler-dist (2.0.2) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (2.0.2)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 2.0.2 ...

org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.7), org.apache.dolphinscheduler:dolphinscheduler-api (1.3.7) +3 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-dao (1.3.7)

org.apache.dolphinscheduler:dolphinscheduler-dao MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-dao and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-alert 1.3.7 -...

org.apache.dolphinscheduler:dolphinscheduler-api (1.3.1), org.apache.dolphinscheduler:dolphinscheduler-server (1.3.1) potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (1.3.1)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 1.3.1 ...

org.apache.dolphinscheduler:dolphinscheduler-api (1.3.5), org.apache.dolphinscheduler:dolphinscheduler-server (1.3.5) potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (1.3.5)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 1.3.5 ...

org.apache.dolphinscheduler:dolphinscheduler-api (1.3.0), org.apache.dolphinscheduler:dolphinscheduler-server (1.3.0) potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (1.3.0)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 1.3.0 ...

org.apache.dolphinscheduler:dolphinscheduler-api (1.3.4), org.apache.dolphinscheduler:dolphinscheduler-server (1.3.4) potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (1.3.4)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 1.3.4 ...

org.apache.dolphinscheduler:dolphinscheduler-api (1.3.7), org.apache.dolphinscheduler:dolphinscheduler-server (1.3.7) +1 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (1.3.7)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 1.3.7 ...

org.apache.dolphinscheduler:dolphinscheduler-api (1.3.2), org.apache.dolphinscheduler:dolphinscheduler-server (1.3.2) potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-service (1.3.2)

org.apache.dolphinscheduler:dolphinscheduler-service MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-service and may be impacted: - org.apache.dolphinscheduler:dolphinscheduler-api 1.3.2 ...

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-alert (1.3.9) +7 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (1.3.9)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version 1.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dolphinscheduler:dolphinscheduler-common and may be impacted: - com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics...

Password Disclosure

dolphinscheduler-server is vulnerable to Password Disclosure. The vulnerability exists due to improper handling of logs in the process function of LoggerRequestProcessor.java, allowing an attacker to utilize tasks to read config files, which could include the database password...

Information Disclosure

dolphinscheduler-server is vulnerable to Information Disclosure. The vulnerability exists due to improper handling of logs in the process function of LoggerRequestProcessor.java, allowing an attacker to read log files through the log server...

org.apache.dolphinscheduler:dolphinscheduler-api (>=1.2.0, <=1.2.1) potentially affected by CVE-2021-27644 via org.apache.dolphinscheduler:dolphinscheduler-server (>=1.2.0, <=1.2.1)

org.apache.dolphinscheduler:dolphinscheduler-server MAVEN version =1.2.0, =1.2.0, =1.2.1 Source cves: CVE-2021-27644 Source advisory: OSV:GHSA-93G4-3PHC-G4XW...

org.apache.dolphinscheduler:dolphinscheduler-api (>=1.2.0, <=1.2.1) potentially affected by CVE-2021-27644 via org.apache.dolphinscheduler:dolphinscheduler-server (>=1.2.0, <=1.2.1)

org.apache.dolphinscheduler:dolphinscheduler-server MAVEN version =1.2.0, =1.2.0, =1.2.1 Source cves: CVE-2021-27644 Source advisory: GHSA-93G4-3PHC-G4XW...

org.apache.dolphinscheduler:dolphinscheduler-api (>=1.2.0, <=1.2.1) potentially affected by CVE-2021-27644 via org.apache.dolphinscheduler:dolphinscheduler-server (>=1.2.0, <=1.2.1)

org.apache.dolphinscheduler:dolphinscheduler-server MAVEN version =1.2.0, =1.2.0, =1.2.1 Source cves: CVE-2021-27644 Source advisory: MEND:CVE-2021-27644...