openmetadata vulnerabilities

CVEs whose affected-version data names the openmetadata package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-22244High· 7.2

8mo ago

OpenMetadata is a unified metadata platform

OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges t…

▾ Twilightopen-metadata · openmetadataEPSS 1.1%via NVD