You are viewing a plain text version of this content. The canonical link for it is here.

---

- CVE-2026-66082: Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow） - posted by Wenjun Ruan <we...@apache.org> on 2026/10/08 01:45:32 UTC, 0 replies.
- CVE-2026-66084: Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint - posted by Wenjun Ruan <we...@apache.org> on 2026/10/08 01:45:45 UTC, 0 replies.
- CVE-2026-66087: Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint - posted by Wenjun Ruan <we...@apache.org> on 2026/10/08 01:45:58 UTC, 0 replies.
- CVE-2026-71183: Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords - posted by Wenjun Ruan <we...@apache.org> on 2026/10/08 01:46:12 UTC, 0 replies.
- CVE-2026-71895: Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials - posted by Wenjun Ruan <we...@apache.org> on 2026/10/08 01:46:24 UTC, 0 replies.
- CVE-2026-71896: Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account Information - posted by Wenjun Ruan <we...@apache.org> on 2026/10/08 01:46:36 UTC, 0 replies.