Security
فارسی
All products

org.apache.dolphinscheduler:dolphinscheduler-api

Maven · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.CVE-2026-47340 · GHSA-694G-J8PJ-CJJ5 org.apache.dolphinscheduler:dolphinscheduler-api Maven Medium Fix reported
Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. CVE-2026-42357 · GHSA-WV7F-C794-82V6 org.apache.dolphinscheduler:dolphinscheduler-api Maven Medium Fix reported
Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projectsCVE-2026-41280 · GHSA-WH3W-V6GJ-FQH2 org.apache.dolphinscheduler:dolphinscheduler-api Maven Medium Fix reported
Apache DolphinScheduler: The `/v2` experimental interface lacks permission checksCVE-2026-32967 · GHSA-85G9-8J9G-P486 org.apache.dolphinscheduler:dolphinscheduler-api Maven Critical Fix reported
Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure CVE-2026-32966 · GHSA-R989-CJHX-3V49 org.apache.dolphinscheduler:dolphinscheduler-api Maven Critical Fix reported
Incorrect Default Permissions in Apache DolphinSchedulerCVE-2020-13922 · GHSA-QHH5-9738-G9MX org.apache.dolphinscheduler:dolphinscheduler-apiapache-dolphinscheduler MavenPyPI High Fix reported
Apache DolphinScheduler's python gateway suffered from improper authenticationCVE-2023-25601 · GHSA-3JXW-CV35-2MMV org.apache.dolphinscheduler:dolphinscheduler-api Maven Medium Fix reported
Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2023-49068 · GHSA-C6CG-73P3-973H org.apache.dolphinscheduler:dolphinscheduler-api Maven Medium Fix reported
Apache DolphinScheduler Missing Authorization vulnerabilityCVE-2023-49620 · GHSA-R44Q-98GX-PMH2 org.apache.dolphinscheduler:dolphinscheduler-apiorg.apache.dolphinscheduler:dolphinscheduler-common Maven Medium Fix reported