org.open-metadata:openmetadata-service
Maven5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.open-metadata:openmetadata-servicepage 1 of 1
- CVE-2024-28253CRITICALCVSS 9.4EG 9.4✓ Fixed in 1.3.12024-03-15
vulnerable: 0.12.1 ... DEMO_BETA1 (38 versions)
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. `CompiledRule::validateExpression` is also called from `PolicyRepo…
- CVE-2024-28847HIGHCVSS 8.8EG 8.8✓ Fixed in 1.2.42024-03-15
vulnerable: 0.12.1 ... DEMO_BETA1 (34 versions)
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. Similarly to the GHSL-2023-250 issue, `AlertUtil::validateExpressi…
- CVE-2024-28848HIGHCVSS 8.8EG 8.8✓ Fixed in 1.2.42024-03-15
vulnerable: 0.12.1 ... DEMO_BETA1 (34 versions)
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `CompiledRule::validateExpression` method evaluates an SpEL…
- CVE-2024-55238HIGHCVSS 7.1EG 7.12025-04-17
vulnerable: 0.12.1 ... DEMO_BETA1 (53 versions)
OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query.
- CVE-2026-46481HIGHCVSS 8.3EG 8.3✓ Fixed in 1.12.42026-05-21
vulnerable: 0.12.1 ... DEMO_BETA1 (175 versions)
OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, in the HTTP 201 response of POST /api/v1/automations/workflows, both the …
Check whether org.open-metadata:openmetadata-service is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.open-metadata:openmetadata-service CVEs against the assets you own.
Start Free Scan →