~ / search / GHSA-r989-cjhx-3v49

GHSA-r989-cjhx-3v49

Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-32966

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.dolphinscheduler:dolphinscheduler-api < 3.4.2 3.4.2

Details

As written in the advisory (Markdown source, shown as plain text).

DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.