# datahub.

Every CVE that names datahub among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability](https://agentprime.io/advisories/CVE-2026-44501.md)
  `CVE-2026-44501` · CVE record: datahub-project datahub · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: Insecure deserialization
- [DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade](https://agentprime.io/advisories/CVE-2026-25644.md)
  `CVE-2026-25644` · CVE record: datahub-project datahub · CVSS 7.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: Weak cryptography or TLS
- [Default Privileges allow for high level operations for low privileged users in datahub](https://agentprime.io/advisories/CVE-2024-22409.md)
  `CVE-2024-22409` · CVE record: datahub-project datahub · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control
- [Insecure Use of HMAC-SHA1 For Session Signing in datahub](https://agentprime.io/advisories/CVE-2023-47640.md)
  `CVE-2023-47640` · CVE record: datahub-project datahub · CVSS 6.4 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Weak cryptography or TLS
- [Session Expiration Misconfiguration in datahub](https://agentprime.io/advisories/CVE-2023-47628.md)
  `CVE-2023-47628` · CVE record: datahub-project datahub · CVSS 4.2 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Authentication bypass
- [Privilege escalation through email sign-up in datahub](https://agentprime.io/advisories/CVE-2023-47629.md)
  `CVE-2023-47629` · CVE record: datahub-project datahub · CVSS 7.1 High · Not analysed yet · Published 14 Nov 2023 · Tags: Privilege escalation
- [Server-Side Request Forgery in DataHub](https://agentprime.io/advisories/CVE-2023-25557.md)
  `CVE-2023-25557` · CVE record: datahub-project datahub · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2023 · Tags: Server-side request forgery (SSRF)
- [Deserialization of untrusted data in DataHub](https://agentprime.io/advisories/CVE-2023-25558.md)
  `CVE-2023-25558` · CVE record: datahub-project datahub · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2023 · Tags: Insecure deserialization
- [System account impersonation in DataHub](https://agentprime.io/advisories/CVE-2023-25559.md)
  `CVE-2023-25559` · CVE record: datahub-project datahub · CVSS 8.2 High · Not analysed yet · Published 10 Feb 2023 · Tags: Authentication bypass
- [JSON Injection in DataHub](https://agentprime.io/advisories/CVE-2023-25560.md)
  `CVE-2023-25560` · CVE record: datahub-project datahub · CVSS 8.2 High · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-913
- [Login fail open on JAAS misconfiguration in DataHub](https://agentprime.io/advisories/CVE-2023-25561.md)
  `CVE-2023-25561` · CVE record: datahub-project datahub · CVSS 5.7 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-755
- [Failure to Invalidate Session on Logout in DataHub](https://agentprime.io/advisories/CVE-2023-25562.md)
  `CVE-2023-25562` · CVE record: datahub-project datahub · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=datahub>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/datahub/>. Everything for agents: <https://agentprime.io/llms.txt>.