Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-32966
9.8
CRITICALCVSS v3
Published
June 17, 2026
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
apache/dolphinscheduler
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code< 3.4.2NVD