| CVE-2026-124326 |
DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal
|
5.3
Medium
|
Nov 8, 2026 |
| CVE-2026-122009 |
DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery
|
6.9
Medium
|
Nov 4, 2026 |
| CVE-2026-70559 |
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation…
|
7.5
High
|
Aug 6, 2026 |
| CVE-2026-70558 |
Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new…
|
9.8
Critical
|
Aug 6, 2026 |
| CVE-2026-3053 |
A vulnerability was determined in DataLinkDC dinky up to 1.2.5
|
6.9
Medium
|
Feb 24, 2026 |
| CVE-2026-3052 |
A vulnerability was found in DataLinkDC dinky up to 1.2.5
|
5.3
Medium
|
Feb 24, 2026 |
| CVE-2026-3051 |
A vulnerability has been found in DataLinkDC dinky up to 1.2.5
|
5.3
Medium
|
Feb 24, 2026 |