Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-41280
4.9
MEDIUMCVSS v3
Published
June 17, 2026
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue.
apache/dolphinscheduler
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code< 3.4.2NVD