Medium
DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability
Type: advisorySources: OSV
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java objects from the REDIRECT_URL HTTP cookie during the OIDC callback flow, with no integrity protection (no HMAC, no encryption). This is a Deserialization of Untrusted Data vulnerability (CWE-502) affecting the GET /callback/oidc endpoint. Successful exploitation requires a valid user account in the configured OIDC identity provider This vulnerability is fixed in 1.5.0.3.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-44501
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 11:40 UTC · Revision 1
Source evidence
DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability
core-osv · Original sourcePublished 14 May 2026, 15:41 UTC
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java objects from the REDIRECT_URL HTTP cookie during the OIDC callback flow, with no integrity protection (no HMAC, no encryption). This is a Deserialization of Untrusted Data vulnerability (CWE-502) affecting the GET /callback/oidc endpoint. Successful exploitation requires a valid user account in the configured OIDC identity provider This vulnerability is fixed in 1.5.0.3.
osv:CVE-2026-44501
Complete source record
{
"id": "90be13dad0cb073424ca614c5efb727dd3d76a6992436b051f0b0af694321537",
"url": "https://osv.dev/vulnerability/CVE-2026-44501",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability",
"summary": "DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java objects from the REDIRECT_URL HTTP cookie during the OIDC callback flow, with no integrity protection (no HMAC, no encryption). This is a Deserialization of Untrusted Data vulnerability (CWE-502) affecting the GET /callback/oidc endpoint. Successful exploitation requires a valid user account in the configured OIDC identity provider This vulnerability is fixed in 1.5.0.3.",
"evidence": "osv:CVE-2026-44501",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2026-44501",
"aliases": [
"CVE-2026-44501",
"GHSA-rjf9-p49v-42c4"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/acryldata/datahub",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "39c64478e3a219b2d85ab1bf354ca079c779418f"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.5.0.3"
}
],
"source": "CPE_RANGE"
}
]
}
},
{
"repo": "https://github.com/datahub-project/datahub",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "13361c7f6a65ffe92a1c502eb601f4b22a4bc580"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "1.5.0.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"cpe": "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.5.0.3"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v1.5.0.2rc5",
"v1.5.0.2",
"v1.5.0.2rc4",
"v1.5.0.2rc3",
"v1.5.0.2rc2",
"v1.5.0.2rc1",
"v1.5.0.2rc0",
"v1.5.0.1rc2",
"v1.5.0.1",
"v1.5.0.1rc1",
"v1.5.0.1rc0",
"v1.5.0rc1",
"v1.5.0",
"v1.4.0.9rc1",
"v1.4.0.9",
"v1.4.0.8",
"v1.4.0.8rc1",
"v1.4.0.7rc3",
"v1.4.0.7",
"v1.4.0.7rc2",
"v1.4.0.7rc1",
"v1.4.0.6rc5",
"v1.4.0.6",
"v1.4.0.6rc4",
"v1.4.0.6rc3",
"v1.4.0.6rc2",
"v1.4.0.6rc1",
"v1.4.0.5rc2",
"v1.4.0.5",
"v1.4.0.5rc1",
"v1.4.0.4rc5",
"v1.4.0.4",
"v1.4.0.4rc4",
"v1.4.0.4rc3",
"v1.4.0.4rc2",
"v1.4.0.4rc1",
"v1.4.0.3rc8",
"v1.4.0.3",
"v1.4.0.3rc7",
"v1.4.0.3rc6",
"v1.4.0.3rc5",
"v1.4.0.3rc3",
"v1.4.0.3rc4",
"v1.4.0.3rc2",
"v1.4.0.3rc1",
"v1.3.1.4",
"v1.2.0.9rc2",
"v1.2.0.9",
"v1.3.1",
"v1.3.0.1rc10",
"1.3.0.1rc10",
"v1.2.0.11rc1",
"v1.2.0.6rc1",
"v1.2.0.6",
"v1.4.0.2",
"v1.3.1.1rc3",
"v1.3.1.1",
"v1.3.1.7rc1",
"v1.3.1.7",
"v1.4.0.1rc1",
"v1.4.0.1",
"v1.4.0",
"v1.4.0rc5",
"v1.4.0rc4",
"v1.4.0rc3",
"v1.4.0rc2",
"v1.4.0rc1",
"v1.3.1.10",
"v1.3.1.10rc1",
"v1.3.1.9",
"v1.3.1.8rc3",
"v1.3.1.8",
"v1.3.1.8rc2",
"v1.3.1.8rc1",
"v1.3.1.6rc2",
"v1.3.1.6",
"v1.3.1.6rc1",
"v1.3.1.5rc11",
"v1.3.1.5",
"v1.3.1.5rc10",
"v1.3.1.5rc9",
"v1.3.1.5rc8",
"v1.3.1.5rc7",
"v1.3.1.5rc6",
"v1.3.1.5rc5",
"v1.3.1.5rc4",
"v1.3.1.5rc3",
"v1.3.1.5rc2",
"v1.3.1.5rc1",
"v1.3.1.3",
"v1.3.1.3rc2",
"v1.3.1.3rc1",
"v1.3.1.2rc1",
"v1.3.1.2",
"v1.3.1.1rc4",
"v1.3.1.1rc2",
"v1.3.1.1rc1",
"v1.3.0.1rc9",
"v1.3.0.1rc8",
"v1.3.0.1rc7",
"v1.3.0.1rc6",
"v1.3.0.1rc5",
"v1.3.0.1rc4",
"v1.3.0.1rc3",
"v1.3.0.1rc2",
"v1.3.0.1rc1",
"v1.3.0rc5",
"v1.3.0",
"v1.3.0rc4",
"v1.2.0.11rc5",
"v1.2.0.11rc4",
"v1.2.0.11rc3",
"v1.2.0.11rc2",
"v1.2.0.10rc8",
"v1.2.0.10",
"v1.2.0.10rc7",
"v1.2.0.10rc6",
"v1.2.0.10rc5",
"v1.2.0.10rc4",
"v1.2.0.10rc3",
"v1.2.0.10rc2",
"v1.2.0.10rc1",
"v1.2.0.9rc1",
"v1.2.0.8rc4",
"v1.2.0.8",
"v1.2.0.8rc3",
"v1.2.0.8rc2",
"v1.2.0.8rc1",
"v1.2.0.7rc4",
"v1.2.0.7",
"v1.2.0.7rc3",
"v1.2.0.7rc2",
"v1.2.0.7rc1",
"v1.2.0.5rc2",
"v1.2.0.5",
"v1.2.0.5rc1",
"v1.2.0.4rc4",
"v1.2.0.4",
"1.2.0.4",
"v1.2.0.4rc3",
"v1.2.0.4rc2",
"v1.2.0.4rc1",
"v1.2.0.3rc2",
"v1.2.0.3",
"v1.2.0.3rc1",
"v1.2.0.2rc3",
"v1.2.0.2",
"v1.2.0.2rc2",
"v1.2.0.2rc1",
"v1.2.0.1rc1",
"v1.2.0.1",
"v1.2.0",
"v1.1.0.5rc13",
"v1.1.0.5",
"v1.1.0.5rc12",
"v1.1.0.5rc11",
"v1.1.0.5rc10",
"v1.1.0.5rc9",
"v1.1.0.5rc8",
"v1.1.0.5rc7",
"v1.1.0.5rc6",
"v1.1.0.5rc5",
"v1.1.0.5rc4",
"v1.1.0.5rc3",
"v1.1.0.5rc2",
"v1.1.0.5rc1",
"v1.1.0.4rc3",
"v1.1.0.4",
"v1.1.0.4rc2",
"v1.1.0.4rc1",
"v1.1.0.3rc2",
"v1.1.0.3",
"v1.1.0.3rc1",
"v1.1.0.2rc1",
"v1.1.0.2",
"v1.1.0.1rc6",
"v1.1.0.1",
"v1.1.1rc4",
"v1.1.1rc3",
"v1.1.1rc2",
"v1.1.1rc1",
"v1.1.0",
"v1.1.0rc3",
"v1.1.0rc2",
"v1.1.0rc1",
"v1.0.0.4rc8",
"v1.0.0.4rc7",
"v1.0.0.4rc6",
"v1.0.0.4rc5",
"v1.0.0.4rc4",
"v1.0.0.4rc3",
"v1.0.0.4rc2",
"v1.0.0.4rc1",
"v1.0.0.3",
"v1.0.0.3rc12",
"v1.0.0.3rc11",
"v1.0.0.3rc10",
"v1.0.0.3rc9",
"v1.0.0.3rc8",
"v1.0.0.3rc7",
"v1.0.0.3rc6",
"v1.0.0.3rc5",
"v1.0.0.3rc4",
"v1.0.0.3rc3",
"v1.0.0.3rc2",
"v1.0.0.3rc1",
"v1.0.0.2rc5",
"v1.0.0.2",
"v1.0.0.2rc4",
"v1.0.0.2rc3",
"v1.0.0.2rc2",
"v1.0.0.2rc1",
"v1.0.0.1rc7",
"v1.0.0.1",
"v1.0.0.1rc6",
"v1.0.0.1rc5",
"v1.0.0.1rc4",
"v1.0.0.1rc3",
"v1.0.0.1rc2",
"v1.0.0.1rc1",
"v1.0.0rc18",
"v1.0.0",
"v1.0.0rc17",
"v1.0.0rc16",
"v1.0.0rc15",
"v1.0.0rc14",
"v1.0.0rc13",
"v1.0.0rc12",
"v1.0.0rc11",
"v1.0.0rc10",
"v1.0.0rc9",
"v1.0.0rc8",
"v1.0.0rc7",
"v1.0.0rc6",
"v1.0.0rc5",
"v1.0.0rc4",
"v1.0.0rc3",
"v1.0.0rc2",
"v1.0.0rc1",
"v0.15.0.6rc3",
"v0.15.0.6rc2",
"v0.15.0.6rc1",
"v0.15.0.5rc10",
"v0.15.0.5",
"v0.15.0.5rc9",
"v0.15.0.5rc8",
"v0.15.0.5rc7",
"v0.15.0.5rc6",
"v0.15.0.5rc5",
"v0.15.0.5rc4",
"v0.15.0.5rc3",
"v0.15.0.4rc3",
"v0.15.0.4",
"v0.15.0.4rc2",
"v0.15.0.4rc1",
"v0.15.0.3rc1",
"v0.15.0.3",
"v0.15.0.2",
"v0.15.0.2rc8",
"v0.15.0.2rc7",
"v0.15.0.2rc6",
"v0.15.0.2rc5",
"v0.15.0.2rc4",
"v0.15.0.2rc3",
"v0.15.0.2rc2",
"v0.15.0.2rc1",
"v0.15.0.1rc17",
"v0.15.0.1",
"v0.15.0.1rc16",
"v0.15.0.1rc15",
"v0.15.0.1rc14",
"v0.15.0.1rc13",
"v0.15.0.1rc12",
"v0.15.0.1rc11",
"v0.15.0.1rc10",
"v0.15.0.1rc9",
"v0.15.0.1rc8",
"v0.15.0.1rc7",
"v0.15.0.1rc6",
"v0.15.0.1rc5",
"v0.15.0.1rc4",
"v0.15.0.1rc3",
"v0.15.0.1rc2",
"v0.15.0.1rc1",
"v0.15.0rc25",
"v0.15.0",
"v0.15.0rc24",
"v0.15.0rc23",
"v0.15.0rc22",
"v0.15.0rc21",
"v0.15.0rc20",
"v0.15.0rc19",
"v0.15.0rc18",
"v0.15.0rc17",
"v0.15.0rc16",
"v0.15.0rc15",
"v0.15.0rc14",
"v0.15.0rc13",
"v0.15.0rc12",
"v0.15.0rc11",
"v0.15.0rc10",
"v0.15.0rc9",
"v0.15.0rc8",
"v0.15.0rc7",
"v0.15.0rc6",
"v0.15.0rc5",
"v0.15.0rc4",
"v0.15.0rc3",
"v0.15.0rc2",
"v0.15.0rc1",
"v0.14.1.13rc9",
"v0.14.1.13rc8",
"v0.14.1.13rc7",
"v0.14.1.13rc6",
"v0.14.1.13rc5",
"v0.14.1.13rc4",
"v0.14.1.13rc3",
"v0.14.1.13rc2",
"v0.14.1.13rc1",
"v0.14.1.12rc5",
"v0.14.1.12",
"v0.14.1.12rc4",
"v0.14.1.12rc3",
"v0.14.1.12rc2",
"v0.14.1.12rc1",
"v0.14.1.11rc1",
"v0.14.1.11",
"v0.14.1.10rc1",
"v0.14.1.10",
"v0.14.1.9rc1",
"v0.14.1.9",
"v0.14.1.8rc1",
"v0.14.1.8",
"v0.14.1.7rc3",
"v0.14.1.7",
"v0.14.1.7rc2",
"v0.14.1.7rc1",
"v0.14.1.6rc2",
"v0.14.1.6",
"v0.14.1.6rc1",
"v0.14.1.5rc1",
"v0.14.1.5",
"0.14.1.5rc1",
"v0.14.1.4rc3",
"0.14.1.4",
"v0.14.1.4rc2",
"v0.14.1.4rc1",
"v0.14.1.3rc5",
"v0.14.1.3",
"v0.14.1.3rc4",
"v0.14.1.3rc3",
"v0.14.1.3rc2",
"v0.14.1.3rc1",
"v0.14.1.2rc1",
"v0.14.1.2",
"v0.14.1.1rc6",
"v0.14.1.1",
"v0.14.1.1rc5",
"v0.14.1.1rc4",
"v0.14.1.1rc3",
"v0.14.1.1rc2",
"v0.14.1.1rc1",
"v0.14.1rc1",
"v0.14.0.6rc3",
"v0.14.1rc4",
"v0.14.1",
"v0.14.0.6rc2",
"v0.14.0.6rc1",
"v0.14.0.5rc6",
"v0.14.0.5",
"v0.14.0.5rc5",
"v0.14.0.5rc4",
"v0.14.0.5rc3",
"v0.14.0.5rc2",
"v0.14.0.4rc1",
"v0.14.0.4",
"v0.14.0.5rc1",
"v0.14.0.3rc4",
"v0.14.0.3",
"v0.14.0.3rc3",
"v0.14.0.3rc2",
"v0.14.0.3rc1",
"v0.14.0.2rc3",
"v0.14.0.2",
"v0.14.0.2rc2",
"v0.14.0.2rc1",
"v0.14.0.1rc1",
"v0.14.0.1",
"v0.14.0rc1",
"v0.14.0",
"v0.13.3.7rc3",
"v0.13.3.7rc2",
"v0.13.3.7rc1",
"v0.13.3.6rc3",
"v0.13.3.6",
"v0.13.3.6rc2",
"v0.13.3.6rc1",
"v0.13.3.5rc6",
"v0.13.3.5",
"v0.13.3.5rc5",
"v0.13.3.5rc4",
"v0.13.3.5rc3",
"v0.13.3.5rc2",
"v0.13.3.5rc1",
"v0.13.3.4rc7",
"v0.13.3.4",
"v0.13.3.4rc6",
"v0.13.3.4rc5",
"v0.13.3.4rc4",
"v0.13.3.4rc3",
"v0.13.3.4rc2",
"v0.13.3.4rc1",
"v0.13.3.3rc4",
"v0.13.3.3",
"v0.13.3.3rc3",
"v0.13.3.3rc2",
"v0.13.3.3rc1",
"v0.13.3.2",
"v0.13.3.1rc6",
"v0.13.3.1",
"v0.13.3.1rc5",
"v0.13.3.1rc4",
"v0.13.3.1rc3",
"v0.13.3.1rc2",
"v0.13.3.1rc1",
"v0.13.3rc17",
"v0.13.3",
"v0.13.3rc16",
"v0.13.3rc15",
"v0.13.3rc14",
"v0.13.3rc13",
"v0.13.3rc12",
"v0.13.3rc11",
"v0.13.3rc10",
"v0.13.3rc9",
"v0.13.3rc8",
"v0.13.3rc7",
"v0.13.3rc6",
"v0.13.3rc5",
"v0.13.3rc4",
"v0.13.3rc3",
"v0.13.3rc2",
"v0.13.3rc1",
"v0.13.2.5rc2",
"v0.13.2.5rc1",
"v0.13.2.4rc2",
"v0.13.2.4",
"v0.13.2.4rc1",
"v0.13.2.3rc1",
"v0.13.2.3",
"v0.13.2.2rc3",
"v0.13.2.2",
"v0.13.2.2rc2",
"v0.13.2.2rc1",
"v0.13.2.1rc3",
"v0.13.2.1",
"v0.13.2.1rc2",
"v0.13.2.1rc1",
"v0.13.2",
"v0.13.1.4rc4",
"v0.13.1.4rc3",
"v0.13.1.4rc2",
"v0.13.1.4rc1",
"v0.13.1.3",
"v0.13.1.3rc17",
"v0.13.1.3rc16",
"v0.13.1.3rc15",
"v0.13.1.3rc14",
"v0.13.1.3rc13",
"v0.13.1.3rc12",
"v0.13.1.3rc11",
"v0.13.1.3rc10",
"v0.13.1.3rc9",
"v0.13.1.3rc8",
"v0.13.1.3rc7",
"v0.13.1.3rc6",
"v0.13.1.3rc5",
"v0.13.1.3rc4",
"v0.13.1.3rc3",
"v0.13.1.3rc2",
"v0.13.1.3rc1",
"v0.13.1.2",
"v0.13.1.1",
"v0.13.1rc6",
"v0.13.1",
"v0.13.1rc5",
"v0.13.1rc4",
"v0.13.1rc3",
"v0.13.1rc2",
"v0.13.1rc1",
"v0.13.0rc1",
"v0.13.0",
"v0.12.1.6rc7",
"v0.12.1.6rc6",
"v0.12.1.6rc5",
"v0.12.1.6rc4",
"v0.12.1.6rc3",
"v0.12.1.6rc2",
"v0.12.1.6rc1",
"v0.12.1.5rc5",
"v0.12.1.5",
"v0.12.1.5rc4",
"v0.12.1.5rc3",
"v0.12.1.5rc2",
"v0.12.1.5rc1",
"v0.12.1.4rc10",
"v0.12.1.4",
"v0.12.1.4rc9",
"v0.12.1.4rc8",
"v0.12.1.4rc7",
"v0.12.1.4rc6",
"v0.12.1.4rc5",
"v0.12.1.4rc4",
"v0.12.1.4rc3",
"v0.12.1.4rc2",
"v0.12.1.4rc1",
"v0.12.1.3rc1",
"v0.12.1.3",
"v0.12.1.2rc4",
"v0.12.1.2",
"v0.12.1.2rc3",
"v0.12.1.2rc2",
"v0.12.1.2rc1",
"v0.12.1.1rc3",
"v0.12.1.1",
"v0.12.1.1rc2",
"v0.12.1.1rc1",
"v0.12.1.0",
"v0.12.0.5rc2",
"v0.12.0.5",
"v0.12.0.5rc1",
"v0.12.0.4rc1",
"v0.12.0.4",
"v0.12.0.3rc1",
"v0.12.0.3",
"v0.12.0.2",
"v0.12.0.1rc3",
"v0.12.0.1",
"v0.12.0.1rc2",
"v0.12.0.1rc1",
"v0.12.0rc2",
"v0.12.0",
"v0.12.0rc1",
"v0.11.0.6rc1",
"v0.11.0.5rc6",
"v0.11.0.5",
"v0.11.0.5rc5",
"v0.11.0.5rc4",
"v0.11.0.5rc3",
"v0.11.0.5rc2",
"v0.11.0.5rc1",
"v0.11.0.4rc1",
"v0.11.0.4",
"v0.11.0.3rc2",
"v0.11.0.3",
"v0.11.0.3rc1",
"v0.11.0.2",
"v0.11.0.1rc1",
"v0.11.0.1",
"v0.11.0rc1",
"v0.11.0",
"v0.10.5.6rc4",
"v0.10.5.6rc3",
"v0.10.5.6rc2",
"v0.10.5.6rc1",
"v0.10.5.5rc1",
"v0.10.5.5",
"v0.10.5.4rc1",
"v0.10.5.4",
"v0.10.5.3rc1",
"v0.10.5.3",
"v0.10.5.2rc9",
"v0.10.5.2",
"v0.10.5.2rc8",
"v0.10.5.2rc7",
"v0.10.5.2rc6",
"v0.10.5.2rc5",
"v0.10.5.2rc4",
"v0.10.5.2rc3",
"v0.10.5.2rc2",
"v0.10.5.2rc1",
"v0.10.5.1rc1",
"v0.10.5.1",
"v0.10.5rc1",
"v0.10.5",
"v0.10.4.4rc1",
"v0.10.4.3rc1",
"v0.10.4.3",
"v0.10.4.2rc2",
"v0.10.4.2",
"v0.10.4.2rc1",
"v0.10.4.1rc1",
"v0.10.4.1",
"v0.10.4rc2",
"v0.10.4",
"v0.10.4rc1",
"v0.10.3.2",
"v0.10.3.2rc5",
"v0.10.3.2rc4",
"v0.10.3.2rc3",
"v0.10.3.2rc2",
"v0.10.3.2rc1",
"v0.10.3.1rc3",
"v0.10.3.1",
"v0.10.3.1rc2",
"v0.10.3.1rc1",
"v0.10.3rc1",
"v0.10.3",
"v0.10.3rc0",
"v0.10.2.4rc6",
"v0.10.2.4rc5",
"v0.10.2.4rc4",
"v0.10.2.4rc3",
"v0.10.2.4rc2",
"v0.10.2.4rc1",
"v0.10.2.3rc9",
"v0.10.2.3",
"v0.10.2.3rc8",
"v0.10.2.3rc7",
"v0.10.2.3rc6",
"v0.10.2.3rc5",
"v0.10.2.3rc4",
"v0.10.2.3rc3",
"v0.10.2.3rc2",
"v0.10.2.3rc1",
"v0.10.1.1rc3",
"v0.10.1.1",
"v0.10.2.2rc3",
"v0.10.2.2",
"v0.10.2.2rc2",
"v0.10.2.2rc1",
"v0.10.2.1rc1",
"v0.10.2.1",
"v0.10.2",
"v0.10.1.2rc12",
"v0.10.1.2rc11",
"v0.10.1.2rc10",
"v0.10.1.2rc9",
"v0.10.1.2rc8",
"v0.10.1.2rc7",
"v0.10.1.2rc6",
"v0.10.1.2rc5",
"v0.10.1.2rc4",
"v0.10.1.2rc1",
"v0.10.1.1rc2",
"v0.10.1.1rc1",
"v0.10.1rc4",
"v0.10.1",
"v0.10.1rc3",
"v0.10.1rc2",
"v0.10.1rc1",
"v0.10.0.7rc2",
"v0.10.0.7",
"v0.10.0.7rc1",
"v0.10.0.6rc2",
"v0.10.0.6",
"v0.10.0.6rc1",
"v0.9.6.2rc2",
"v0.9.6.2",
"v0.9.6.2rc1",
"v0.9.6.1rc6",
"v0.9.6.1rc5",
"v0.9.6.1",
"v0.9.6.1rc4",
"v0.9.6.1rc3",
"v0.9.6.1rc2",
"v0.9.6.1rc1",
"v0.9.6rc1",
"v0.9.6",
"v0.9.6rc0",
"v0.9.5.2rc0",
"v0.9.5.2",
"v0.9.5.1rc6",
"v0.9.5.1",
"v0.9.5.1rc5",
"v0.9.5.1rc4",
"v0.9.5.1rc3",
"v0.9.5.1rc2",
"v0.9.5.1rc1",
"v0.9.5.1rc0",
"v0.9.5",
"v0.9.4.1rc2",
"v0.9.4.1",
"v0.9.4.1rc1",
"v0.9.4rc0",
"v0.9.4.1rc0",
"v0.9.4",
"v0.9.3.3rc6",
"v0.9.3.3rc5",
"v0.9.3.3rc4",
"v0.9.3.3rc3",
"v0.9.3.3rc2",
"v0.9.3.3rc1",
"v0.9.3.3rc0",
"v0.9.3.2rc3",
"v0.9.3.2",
"v0.9.3.2rc2",
"v0.9.3.2rc1",
"v0.9.3.2rc0",
"v0.9.3.1rc1",
"v0.9.3.1",
"v0.9.3.1rc0",
"v0.9.3",
"v0.9.2.5rc8",
"v0.9.2.5",
"v0.9.2.5rc7",
"v0.9.2.5rc6",
"v0.9.2.5rc5",
"v0.9.2.5rc4",
"v0.9.2.5rc3",
"v0.9.2.5rc2",
"v0.9.2.5rc1",
"v0.9.2.4rc2",
"v0.9.2.4",
"v0.9.2.4rc1",
"v0.9.2.3rc4",
"v0.9.2.3",
"v0.9.2.3rc3",
"v0.9.2.3rc2",
"v0.9.2.3rc1",
"v0.9.2.3rc0",
"v0.9.2.2rc3",
"v0.9.2.2",
"v0.9.2.2rc2",
"v0.9.2.2rc1",
"v0.9.2.2rc0",
"v0.9.2.1",
"v0.9.2.1rc2",
"v0.9.2.1rc1",
"v0.9.2.1rc0",
"v0.9.2",
"v0.9.1.1rc2",
"v0.9.1.1rc1",
"v0.9.1.1rc0",
"v0.9.1",
"v0.9.1rc0",
"v0.9.0.5rc2",
"v0.9.0.5",
"v0.9.0.5rc1",
"v0.9.0.5rc0",
"v0.9.0.4rc0",
"v0.9.0.4",
"v0.9.0.3rc0",
"v0.9.0.3",
"v0.9.0.2rc4",
"v0.9.0.2",
"v0.9.0.2rc3",
"v0.9.0.2rc2",
"v0.9.0.2rc1",
"v0.9.0.2rc0",
"v0.9.0.1rc0",
"v0.9.0.1",
"v0.9.0rc6",
"v0.9.0",
"v0.9.0rc5",
"v0.9.0rc4",
"v0.8.45.3rc5",
"v0.8.45.3rc4",
"v0.8.45.3rc3",
"v0.8.45.3rc2",
"v0.8.45.3rc1",
"v0.8.45.3rc0",
"v0.8.45.2rc2",
"v0.8.45.2",
"v0.8.45.2rc1",
"v0.8.45.2rc0",
"v0.8.45.1rc5",
"v0.8.45.1",
"v0.8.45.1rc4",
"v0.8.45.1rc3",
"v0.8.45.1rc2",
"v0.8.45.1rc1",
"v0.8.45.1rc0",
"v0.8.45rc1",
"v0.8.45",
"v0.8.44.6rc0",
"v0.8.44.5rc3",
"v0.8.44.5",
"v0.8.44.5rc2",
"v0.8.44.5rc1",
"v0.8.44.5rc0",
"v0.8.44.4rc1",
"v0.8.44.4",
"v0.8.44.4rc0",
"v0.8.44.3rc3",
"v0.8.44.3",
"v0.8.44.3rc2",
"v0.8.44.3rc1",
"v0.8.44.3rc0",
"v0.8.44.2rc2",
"v0.8.44.2",
"v0.8.44.2rc1",
"v0.8.44.2rc0",
"v0.8.44.1rc4",
"v0.8.44.1",
"v0.8.44.1rc3",
"v0.8.44.1rc2",
"v0.8.44.1rc1",
"v0.8.44.1rc0",
"v0.8.44",
"v0.8.44rc5",
"v0.8.44rc4",
"v0.8.44rc3",
"v0.8.44rc2",
"v0.8.43.6rc1",
"v0.8.43.6",
"v0.8.43.6rc0",
"v0.8.43.5rc3",
"v0.8.43.5",
"v0.8.43.5rc2",
"v0.8.43.5rc1",
"v0.8.43.4rc2",
"v0.8.43.4",
"v0.8.43.4rc1",
"v0.8.43.3rc5",
"v0.8.43.3",
"v0.8.44.3rc4",
"v0.8.43.3rc4",
"v0.8.44rc1",
"v0.8.43rc4",
"v0.8.43.3rc3",
"v0.8.43.3rc2",
"v0.8.43.3rc1",
"v0.8.43.3rc0",
"v0.8.43.2rc1",
"v0.8.43.2",
"v0.8.43.2rc0",
"v0.8.43.1rc1",
"v0.8.43.1",
"v0.8.43.1rc0",
"v0.8.44rc0",
"v0.8.43rc3",
"v0.8.43",
"v0.8.43rc2",
"v0.8.42",
"v0.8.42rc2",
"v0.8.42rc1",
"v0.8.41.3rc3",
"v0.8.41.3rc2",
"v0.8.41.3rc1",
"v0.8.41.2",
"v0.8.41.2rc1",
"v0.8.41.2rc0",
"v0.8.41.1rc4",
"v0.8.41.1",
"v0.8.41.1rc3",
"v0.8.41.1rc2",
"v0.8.41.1rc1",
"v0.8.41.1rc0",
"v0.8.41rc2",
"v0.8.41",
"v0.8.41rc1",
"v0.8.40.4rc2",
"v0.8.40.4rc1",
"v0.8.40.3rc3",
"v0.8.40.3",
"v0.8.40.3rc2",
"v0.8.40.3rc1",
"v0.8.40.3rc0",
"v0.8.40.2rc0",
"v0.8.40.2",
"v0.8.40.1",
"v0.8.40rc1",
"v0.8.40",
"v0.8.39.1rc8",
"v0.8.39.1rc7",
"v0.8.39.1rc6",
"v0.8.39.1rc5",
"v0.8.39.1rc4",
"v0.8.39.1rc3",
"v0.8.39.1rc2",
"v0.8.39.1rc1",
"v0.8.39rc0",
"v0.8.39",
"v0.8.38.5rc0",
"v0.8.38.5",
"v0.8.38.4rc3",
"v0.8.38.4rc2",
"v0.8.38.4rc1",
"v0.8.38.4",
"0.8.38.4rc1",
"v0.8.38.4rc0",
"v0.8.38.3rc1",
"v0.8.38.3",
"v0.8.38.2rc1",
"v0.8.38.2",
"v0.8.38.1rc1",
"v0.8.38.1",
"v0.8.38.1rc0",
"v0.8.38",
"v0.8.37rc0",
"v0.8.37.0rc0",
"v0.8.37",
"v0.8.36.1rc10",
"v0.8.36.1rc9",
"v0.8.36.1rc8",
"v0.8.36.1rc7",
"v0.8.36.1rc6",
"v0.8.36.1rc5",
"v0.8.36.1rc4",
"v0.8.36.1rc3",
"v0.8.36.1rc2",
"v0.8.36.1rc1",
"v0.8.36",
"v0.8.36rc1",
"v0.8.36.0rc0",
"v0.8.35.8rc3",
"v0.8.35.8rc2",
"v0.8.35.8rc1",
"v0.8.35.7rc1",
"v0.8.35.7",
"v0.8.35.6rc2",
"v0.8.35.6",
"v0.8.35.6rc1",
"v0.8.35.5rc1",
"v0.8.35.5",
"v0.8.35.4rc1",
"v0.8.35.4",
"v0.8.35.3rc1",
"v0.8.35.3",
"v0.8.35.2rc1",
"v0.8.35.2",
"v0.8.35.1rc1",
"v0.8.35.1",
"v0.8.35",
"v0.8.35.0rc1",
"v0.8.34.3rc1",
"v0.8.34.2rc4",
"v0.8.34.2",
"v0.8.34.2rc3",
"v0.8.34.2rc2",
"v0.8.34.2rc1",
"v0.8.33.3rc1",
"v0.8.34.1rc3",
"v0.8.34.1",
"v0.8.34.1rc2",
"v0.8.34.1rc1",
"v0.8.34",
"v0.8.33.3rc3",
"v0.8.33.3",
"v0.8.33.3rc2",
"v0.8.33.2rc2",
"v0.8.33.2",
"v0.8.33.2rc1",
"v0.8.33.1",
"v0.8.33rc1",
"v0.8.33",
"v0.8.32.6rc3",
"v0.8.32.6",
"v0.8.32.6rc2",
"v0.8.32.6rc1",
"v0.8.32.5rc1",
"v0.8.32.5",
"v0.8.32.4rc2",
"v0.8.32.4",
"v0.8.32.4rc1",
"v0.8.32.3rc1",
"v0.8.32.3",
"v0.8.32.2rc1",
"v0.8.32.2",
"v0.8.32.1",
"v0.8.32",
"v0.8.32rc4",
"v0.8.32rc3",
"v0.8.32rc2",
"v0.8.32rc1",
"v0.8.31.6rc2",
"v0.8.31.6",
"v0.8.31.6rc1",
"v0.8.31.5",
"v0.8.31.5rc1",
"v0.8.31.4rc1",
"v0.8.31.4",
"v0.8.31.3",
"v0.8.31.3rc1",
"v0.8.31.2",
"v0.8.31.1rc1",
"v0.8.31.1",
"v0.8.31",
"v0.8.28.1",
"v0.8.28",
"v0.8.28.0rc1",
"v0.8.28.0",
"v0.8.27.2rc3",
"v0.8.27.2",
"v0.8.27.2rc2",
"v0.8.27.2rc1",
"v0.8.27.1rc1",
"v0.8.27.1",
"v0.8.27",
"v0.8.26.5",
"v0.8.26.2",
"v0.8.26.1",
"v0.8.26.0",
"v0.8.25.2",
"v0.8.25.1",
"v0.8.25.0",
"v0.8.25",
"v0.8.24.3",
"v0.8.24.2",
"v0.8.24.1",
"v0.8.24.0",
"v0.8.23.2",
"v0.8.23.1",
"v0.8.23.0",
"v0.8.22.1",
"v0.8.22.0",
"v0.8.21.0",
"v0.8.20.0",
"v0.8.19.1",
"v0.8.19.0",
"v0.8.18.1",
"v0.8.18.0",
"v0.8.18",
"v0.8.17.7",
"v0.8.17.6",
"v0.8.17.5",
"v0.8.17.4",
"v0.8.17.3",
"v0.8.17.2",
"v0.8.17.1",
"v0.8.17.0",
"v0.8.16.12",
"v0.8.16.11",
"v0.8.16.10",
"v0.8.16.9",
"v0.8.0-pre",
"v1.5.0.3rc5",
"v1.5.0.3rc4",
"v1.5.0.3rc3",
"v1.5.0.3rc2",
"v1.5.0.3rc1",
"v1.5.0rc5",
"v1.5.0rc4",
"v1.5.0rc3",
"v1.5.0rc2",
"v1.4.1rc1",
"v1.4.0rc12",
"v1.4.0rc8",
"v1.4.0rc11",
"v1.4.0rc10",
"v1.4.0rc9",
"v1.4.0rc7",
"v1.4.0rc6",
"v1.4.0-preview",
"v1.3.0rc1",
"v0.14.1rc2",
"v0.12.1",
"v0.12.1rc2",
"v0.12.1rc1",
"v0.10.0",
"v0.8.30",
"v0.8.29",
"v0.8.28rc1",
"RC-v0.8.28",
"v0.8.26",
"v0.8.24",
"v0.8.23",
"v0.8.22",
"v0.8.21",
"v0.8.20",
"v0.8.19",
"v0.8.17",
"v0.8.16",
"v0.8.15",
"v0.8.14",
"v0.8.13",
"v0.8.12",
"v0.8.11",
"v0.8.10",
"v0.8.9",
"v0.8.8",
"v0.8.7",
"v0.8.6",
"v0.8.5",
"v0.8.4",
"v0.8.3",
"v0.8.2",
"v0.8.1",
"v0.8.0",
"v0.7.1",
"v0.7.0",
"v0.6.1",
"v0.6.0",
"v0.5.0",
"v0.5.0-BETA",
"v0.4.3",
"v0.4.2",
"v0.4.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44501.json"
}
}
],
"modified": "2026-10-28T02:30:34.784749159Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44501.json",
"https://github.com/datahub-project/datahub/security/advisories/GHSA-rjf9-p49v-42c4",
"https://nvd.nist.gov/vuln/detail/CVE-2026-44501"
],
"provider_metadata": {
"cwe_ids": [
"CWE-502"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44501.json"
}
},
"related_cves": [
{
"value": "CVE-2026-44501",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 502117,
"published_at": "2026-05-14T15:41:43.706+00:00"
}