Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-50467
6.5
MEDIUMCVSS v3
Published
August 8, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query.
open-metadata/OpenMetadata
GitHubThe Open Context Layer for Data and AI , OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.
GitHubThe Open Context Layer for Data and AI , OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.<= 1.4.4NVD