data-platform-open vulnerabilities

1 known vulnerability in data-platform-open from Shaiwz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  data-platform-open: Authorization Bypass Through User-Controlled Key

  CVE-2026-111695Oct 16, 2026Shaiwz

  Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasou