Ddatahub-project

Products

Exploited and recent CVEs

• CVE-2026-44501 Medium 4.3 DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability 0.1%
• CVE-2026-25644 High 7.5 DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade 0.3%
• CVE-2024-22409 High 7.5 Default Privileges allow for high level operations for low privileged users in datahub 0.7%
• CVE-2023-47640 Medium 6.4 Insecure Use of HMAC-SHA1 For Session Signing in datahub 0.4%
• CVE-2023-47628 Medium 4.2 Session Expiration Misconfiguration in datahub 0.4%
• CVE-2023-47629 High 7.1 Privilege escalation through email sign-up in datahub 0.5%
• CVE-2023-25557 High 7.5 Server-Side Request Forgery in DataHub 0.7%
• CVE-2023-25558 High 7.5 Deserialization of untrusted data in DataHub 1.0%
• CVE-2023-25559 High 8.2 System account impersonation in DataHub 0.5%
• CVE-2023-25560 High 8.2 JSON Injection in DataHub 0.6%
• CVE-2023-25561 Medium 5.7 Login fail open on JAAS misconfiguration in DataHub 0.4%
• CVE-2023-25562 Medium 6.9 Failure to Invalidate Session on Logout in DataHub 0.4%
• CVE-2022-39366 Critical 9.9 DataHub missing JWT signature check 1.1%