Skip to content
OpenAdvisories

Vendor

open-metadata

10 known vulnerabilities.

Products

OpenMetadata 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.1
    CVE-2026-100373

    OpenMetadata through 2.0.2 SSRF via Webhook URL Validation Bypass

    OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function that fails to properly resolve DNS hostnames and validate internal addresses. Users permitted to create or update EventSubscription can se…

    open-metadata OpenMetadata