datahub-project vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20239
3. 20241
4. 20262

Newest CVEs

• CVE-2026-44501

  DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

  datahub-project · datahub

  Medium4.3
• CVE-2026-25644

  DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

  datahub-project · datahub

  High7.5
• CVE-2024-22409

  Default Privileges allow for high level operations for low privileged users in datahub

  datahub-project · datahub

  High7.5
• CVE-2023-47640

  Insecure Use of HMAC-SHA1 For Session Signing in datahub

  datahub-project · datahub

  Medium6.4
• CVE-2023-47628

  Session Expiration Misconfiguration in datahub

  datahub-project · datahub

  Medium4.2
• CVE-2023-47629

  Privilege escalation through email sign-up in datahub

  datahub-project · datahub

  High7.1
• CVE-2023-25557

  Server-Side Request Forgery in DataHub

  datahub-project · datahub

  High7.5
• CVE-2023-25558

  Deserialization of untrusted data in DataHub

  datahub-project · datahub

  High7.5
• CVE-2023-25559

  System account impersonation in DataHub

  datahub-project · datahub

  High8.2
• CVE-2023-25560

  JSON Injection in DataHub

  datahub-project · datahub

  High8.2