Data Management and Analytics

In Redash versions from 5.0.2 to 26.3.0 a medium severity vulnerability CVE-2026-33213 was detected. This vulnerability allows attackers to redirect users to malicious external websites. To address this issue, users should upgrade Redash to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-33213.

In Apache Kylin versions before 5.0.4 a critical severity vulnerability CVE-2026-62392 was detected. This vulnerability allows attackers to execute arbitrary OS commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62392.

In Apache Kylin versions 4 through 5.0.3 a medium severity vulnerability CVE-2026-62393 was detected. This vulnerability allows an attacker to get access to unauthorized jobs in other projects. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62393.

In Apache Kylin versions 4 through 5.0.3 a critical severity vulnerability CVE-2026-62390 was detected. This vulnerability allows an attacker to execute arbitrary SQL commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62390.

In Apache Airflow versions prior to 3.7.2 a high severity vulnerability CVE-2026-59245 was detected. This vulnerability allows a low-privileged user to escalate privileges and gain read/edit access to all DAGs. To address this issue, users should upgrade Apache Airflow to version 3.7.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59245.

In the Git provider component for Apache Airflow versions 0.4.0 and earlier a high severity vulnerability CVE-2026-58065 was detected. This vulnerability allows a man-in-the-middle attacker to intercept credentials and inject malicious content. To address this issue, users should upgrade the Git provider to version 0.4.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58065.

In vLLM versions before 0.24.0 a high severity vulnerability CVE-2026-54234 was detected. This vulnerability allows a remote attacker to crash the engine worker, causing a denial of service. To address this issue, users should upgrade vLLM to version 0.24.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-54234.

In vLLM versions 0.22.0 to 0.23.0 a medium severity vulnerability CVE-2026-55646 was detected. This vulnerability allows an attacker to cause a denial of service through memory exhaustion by uploading an oversized audio file. To address this issue, users should upgrade vLLM to version 0.24.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-55646.

In Weaviate versions before 1.38.0 a high severity vulnerability CVE-2026-59093 was detected. This vulnerability allows an attacker to escalate their privileges. To address this issue, users should upgrade Weaviate to version 1.38.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59093.