https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:31:58 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2025-62233 <p>Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.</p> <p>This issue affects Apache DolphinScheduler:</p> <p>Version &gt;= 3.2.0 and &lt; 3.3.1.</p> <p>Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue.</p> <p>Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.</p> <p>This issue affects Apache DolphinScheduler:</p> <p>Version &gt;= 3.2.0 and &lt; 3.3.1.</p> <p>Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-62233 https://vulnerability.circl.lu/vuln/ghsa-f786-9c63-8xr8 <p><strong>Affected:</strong> Maven: org.apache.dolphinscheduler:dolphinscheduler, Maven: org.apache.dolphinscheduler:dolphinscheduler-rpc</p> <p>Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.</p> <p>This issue affects Apache DolphinScheduler:</p> <p>Version &gt;= 3.2.0 and &lt; 3.3.1.</p> <p>Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.dolphinscheduler:dolphinscheduler, Maven: org.apache.dolphinscheduler:dolphinscheduler-rpc</p> <p>Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.</p> <p>This issue affects Apache DolphinScheduler:</p> <p>Version &gt;= 3.2.0 and &lt; 3.3.1.</p> <p>Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ghsa-f786-9c63-8xr8