Six Apache DolphinScheduler vulnerabilities, including CVE-2026-71896 and Kubernetes credential leak CVE-2026-71895, are fixed in 3.4.3.
Apache DolphinScheduler
Beware of the Apache DolphinScheduler remote code execution vulnerability (CVE-2024-43202). Learn how this flaw poses a risk to your data pipelines and system security.
CVE-2023-49109 could potentially permit a remote attacker to execute arbitrary code on the DolphinScheduler server
CVE-2023-49299 security vulnerability allows an authenticated user to execute arbitrary, unsandboxed JavaScript on the server.
A recently discovered vulnerability in Apache DolphinScheduler, identified as CVE-2023-48796, poses a significant security risk