Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-42357
6.5
MEDIUMCVSS v3
Published
June 17, 2026
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue.
apache/dolphinscheduler
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code< 3.4.2NVD