Data Management and Analytics

In MongoDB versions prior to 7.0.39 a medium severity vulnerability CVE-2026-13066 was detected. This vulnerability allows for the disclosure of internal process memory contents. To address this issue, users should upgrade MongoDB to version 7.0.39 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13066.

In MongoDB versions prior to 8.0.28 a medium severity vulnerability CVE-2026-13064 was detected. This vulnerability allows attackers to cause resource exhaustion through specially crafted queries. To address this issue, users should upgrade MongoDB to version 8.0.28 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13064.

In MongoDB versions before 8.2.12 a medium severity vulnerability CVE-2026-13063 was detected. This vulnerability allows an authenticated user to cause a denial of service. To address this issue, users should upgrade MongoDB to version 8.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13063.

In Redash versions from 5.0.2 to 26.3.0 a medium severity vulnerability CVE-2026-33213 was detected. This vulnerability allows attackers to redirect users to malicious external websites. To address this issue, users should upgrade Redash to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-33213.

In Apache Kylin versions before 5.0.4 a critical severity vulnerability CVE-2026-62392 was detected. This vulnerability allows attackers to execute arbitrary OS commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62392.

In Apache Kylin versions 4 through 5.0.3 a medium severity vulnerability CVE-2026-62393 was detected. This vulnerability allows an attacker to get access to unauthorized jobs in other projects. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62393.

In Apache Kylin versions 4 through 5.0.3 a critical severity vulnerability CVE-2026-62390 was detected. This vulnerability allows an attacker to execute arbitrary SQL commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62390.

In Apache Airflow versions prior to 3.7.2 a high severity vulnerability CVE-2026-59245 was detected. This vulnerability allows a low-privileged user to escalate privileges and gain read/edit access to all DAGs. To address this issue, users should upgrade Apache Airflow to version 3.7.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59245.

In the Git provider component for Apache Airflow versions 0.4.0 and earlier a high severity vulnerability CVE-2026-58065 was detected. This vulnerability allows a man-in-the-middle attacker to intercept credentials and inject malicious content. To address this issue, users should upgrade the Git provider to version 0.4.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58065.