| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.dolphinscheduler:dolphinscheduler | < 2.0.5 | 2.0.5 |
| apache-dolphinscheduler | < 2.0.5 | 2.0.5 |
| dolphinscheduler | < 2.0.5 | 2.0.5 |
Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks. Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free