alldata vulnerabilities

CVEs whose affected-version data names the alldata package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111613High· 7.5

yesterday

AllData through 0.7.1 Unauthenticated JDBC Injection via /jobJdbcDatasource/test

AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test en…

▾ Twilightalldatacenter · alldatavia CVEORG