- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 5 · 1 critical, 4 high
- Dependents
- 3
- Registry
- Maven Central
Advisories 5
- CVE-2026-46481High 8.3
OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users
Affected: fixed in 1.12.4.
- CVE-2024-55238High 7.1
OpenMetadata <=1.4.1 is vulnerable to SQL Injection.
Affected: through 1.4.1.
- CVE-2024-28848High 8.8
SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata
Affected: fixed in 1.2.4.
- CVE-2024-28847High 8.8
SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata
Affected: fixed in 1.2.4.
- CVE-2024-28253Critical 9.4
SpEL Injection in `PUT /api/v1/policies` in OpenMetadata
Affected: fixed in 1.3.1.