Skip to content

Vendor

datavane vulnerabilities

3 published CVES affecting datavane, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
2
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of datavane alerts

Products

Latest datavane CVEs

Newest publication first

  1. CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

    Published
    MediumCVSS 6.3

    A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a mani...

  2. CVE-2026-24816 Cookie Security Vulnerabilities in datavane/tis

    Published
    CriticalCVSS 10.0

    Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in datavane tis (tis-console/src/main/java/com/qlangtech/tis/runtime/module/action modules). This vulnerability is associated with program files ChangeDomainAction.Java. This issue affects tis: before v4.3.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.