Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.dolphinscheduler/dolphinscheduler-api@3.0.0
purl pkg:maven/org.apache.dolphinscheduler/dolphinscheduler-api@3.0.0
Next non-vulnerable version 1.3.2
Latest non-vulnerable version 3.2.1
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-83q4-bxad-fkbk
Aliases:
CVE-2023-25601
GHSA-3jxw-cv35-2mmv
On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.
3.1.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T21:00:24.198928+00:00 GitLab Importer Affected by VCID-83q4-bxad-fkbk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.dolphinscheduler/dolphinscheduler-api/CVE-2023-25601.yml 38.6.0