Open-metadata

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 15
    Known Exploited: 0
    2
    Critical Level Threats
    10
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-100373

    OpenMetadata through 2.0.2 SSRF via Webhook URL Validation Bypass

    Last Modified: Sep 25, 2026
    Published: Sep 25, 2026

    CVE-2026-81029

    OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

    Last Modified: Oct 20, 2026
    Published: Aug 26, 2026

    CVE-2026-46481

    OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users

    Last Modified: Jun 08, 2026
    Published: Jun 08, 2026

    CVE-2026-26010

    Leaky JWTs in OpenMetadata exposing highly-privileged bot users

    Last Modified: Apr 17, 2026
    Published: Feb 11, 2026

    CVE-2026-22244

    OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

    Last Modified: Aug 31, 2026
    Published: Jan 08, 2026
    Items Per Page
    Open-Metadata Vulnerabilities & Security CVEs | CVE-DB