Skip to content
OpenAdvisories

Vendor

datahub-project

13 known vulnerabilities.

Products

datahub 13
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2022-39366

    DataHub missing JWT signature check

    DataHub is an open-source metadata platform. Prior to version 0.8.45, the `StatelessTokenService` of the DataHub metadata service (GMS) does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadat…

    datahub-project datahub acryl-datahub PyPI