如果您发现安全问题，请直接联系我们：
- [email protected]
- [email protected]
- 400-052-0755
感谢您的支持！
All security bugs should be reported to the contact as below:
- [email protected]
- [email protected]
- 400-052-0755
Thanks for your support!
Security: dataease/dataease
Security
SECURITY.md
-
Security Vulnerability in previewSql Endpoint for H2 Data SourcesGHSA-cf4w-7wqg-6rrh published
Aug 4, 2026 by fit2cloudrdHigh -
Remote Code Execution via H2 JDBC‑URL Injection (Blacklist Bypass) in DataEaseGHSA-h72x-2xr4-hv49 published
Jul 30, 2026 by xuwei-fit2cloudHigh -
Access Control Vulnerabilities in the Sharing Link Module of DataEaseGHSA-9h54-39gh-5qfg published
Jul 30, 2026 by xuwei-fit2cloudHigh -
Missing authorization checks in DataEase geographic information, linkage and chart APIsGHSA-494p-38q6-9gx5 published
Jul 30, 2026 by xuwei-fit2cloudHigh -
Stored SQL Injection via dateFormat field templatesGHSA-h32f-m89w-g35f published
Jul 30, 2026 by xuwei-fit2cloudHigh -
Stored SQL Injection in group-field binning boundsGHSA-gcr3-cj2q-gj4q published
Jul 30, 2026 by xuwei-fit2cloudHigh -
SQL Injection in datasource metadata identifiersGHSA-8hgp-vw27-hxph published
Jul 30, 2026 by xuwei-fit2cloudHigh -
DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site ScriptingGHSA-6pfp-pqvf-xvfg published
Jul 30, 2026 by xuwei-fit2cloudHigh -
DataEase Datasource/Dataset Folder Name Stored Cross-Site ScriptingGHSA-pjh9-r96g-pcqw published
Jul 30, 2026 by xuwei-fit2cloudHigh -
Hardcoded JWT Signing Secret in ShareLinkGHSA-7cpg-f4cj-7pgm published
Jun 18, 2026 by xuwei-fit2cloudHigh
Learn more about advisories related to dataease/dataease in the GitHub Advisory Database