https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:21:58.528490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384530 EUVD-2026-384530 2026-10-09T05:21:58.576784+00:00 EUVD-2026-384530 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66087 fkie_cve-2026-66087 2026-10-09T05:21:58.576830+00:00

An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the

* /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop * /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/savepoint

This issue affects Apache DolphinScheduler: before 3.4.3.

Users are recommended to upgrade to version 3.4.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-8x8j-rj29-7qph GHSA-8x8j-rj29-7qph 2026-10-09T05:21:58.576870+00:00

An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the

* /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop * /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/savepoint

This issue affects Apache DolphinScheduler: before 3.4.3.

Users are recommended to upgrade to version 3.4.3, which fixes the issue.