📦 Datahub

DataHub's LDAP ingestion source is vulnerable to TLS downgrade attacks, allowing man-in-the-middle attackers to intercept and potentially modify LDAP authentication traffic. This affects all DataHub d...

This vulnerability in DataHub's AuthServiceClient allows attackers to manipulate JSON strings with user-controlled data, potentially leading to authentication bypass and unauthorized system account cr...