Datahub-project Datahub vulnerabilities

• datahub DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability CVE-2026-44501 4.3 MediumMay 14, 2026
• datahub DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade CVE-2026-25644 7.5 HighFebruary 6, 2026
• datahub-project datahub Default Privileges allow for high level operations for low privileged users in datahub CVE-2024-22409 7.5 HighJanuary 16, 2024
• datahub-project datahub Insecure Use of HMAC-SHA1 For Session Signing in datahub CVE-2023-47640 6.4 MediumNovember 14, 2023
• datahub-project datahub Session Expiration Misconfiguration in datahub CVE-2023-47628 4.2 MediumNovember 14, 2023
• datahub-project datahub Privilege escalation through email sign-up in datahub CVE-2023-47629 7.1 HighNovember 14, 2023
• datahub Server-Side Request Forgery in DataHub CVE-2023-25557 7.5 HighFebruary 10, 2023
• datahub-project datahub Deserialization of untrusted data in DataHub CVE-2023-25558 7.5 HighFebruary 10, 2023
• datahub System account impersonation in DataHub CVE-2023-25559 8.2 HighFebruary 10, 2023
• datahub JSON Injection in DataHub CVE-2023-25560 8.2 HighFebruary 10, 2023
• datahub Login fail open on JAAS misconfiguration in DataHub CVE-2023-25561 5.7 MediumFebruary 10, 2023
• datahub Failure to Invalidate Session on Logout in DataHub CVE-2023-25562 6.9 MediumFebruary 10, 2023
• datahub DataHub missing JWT signature check CVE-2022-39366 Fix available 9.9 CriticalOctober 28, 2022
• cogent datahub, cogentdatahub cogent datahub +1 more Cogent DataHub Use of Password Hash With Insufficient Computational Effort CVE-2014-2354 6.0 May 30, 2014
• cogent datahub, cogentdatahub cogent datahub +1 more Cogent DataHub XSS CVE-2014-2353 7.1 May 30, 2014
• cogent datahub, cogentdatahub cogent datahub +1 more Cogent DataHub Path Traversal CVE-2014-2352 7.8 May 30, 2014