Skip to content
OpenAdvisories

Package · Maven

org.open-metadata:platform

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-22244

    OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

    OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerab…

    open-metadata OpenMetadata org.open-metadata:platform Maven