CVE-2022-25598: Apache Dolphinscheduler

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

Affected products

• Apache Dolphinscheduler: before 2.0.5 (fixed in 2.0.5)

Published 2022-03-30. Last modified 2026-06-17.