| CVE-2026-124326 |
DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal
|
5.3
Moyenne
|
8 nov. 2026 |
| CVE-2026-122009 |
DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery
|
6.9
Moyenne
|
4 nov. 2026 |
| CVE-2026-70559 |
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation…
|
7.5
Élevée
|
6 août 2026 |
| CVE-2026-70558 |
Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new…
|
9.8
Critique
|
6 août 2026 |
| CVE-2026-3053 |
A vulnerability was determined in DataLinkDC dinky up to 1.2.5
|
6.9
Moyenne
|
24 févr. 2026 |
| CVE-2026-3052 |
A vulnerability was found in DataLinkDC dinky up to 1.2.5
|
5.3
Moyenne
|
24 févr. 2026 |
| CVE-2026-3051 |
A vulnerability has been found in DataLinkDC dinky up to 1.2.5
|
5.3
Moyenne
|
24 févr. 2026 |