Security Context: the context to find the next vulnerability

apache/dolphinscheduler

dev@ c63ecc9

Fixes9

CVEs0

Peak severityHigh

Commits7,738

Regression coverage37.5%

Highlights

Authorization Bypass: 6 prior fixes. Scrutinize any change in this area.

dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/UsersServiceImpl.java: most-fixed (2 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Authorization Bypass: 2 historical fix(es) link dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/UsersServiceImpl.java to Authorization Bypass.

Authentication Bypass: 1 historical fix(es) link dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/SessionServiceImpl.java to Authentication Bypass.

Authorization Bypass: 1 historical fix(es) link dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/ResourcesService.java to Authorization Bypass.

Last analyzed 1 Oct 2026, 18:52 UTC