Running-elephant Datart vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Running-elephant Datart: 2 record(s), with affected versions and fixes.
cpe:2.3:a:running-elephant:datart

CVE-2025-70828 High · 8.8 CWE-78 Feb 17, 2026

OS Command Injection in Running-elephant Datart

An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration

CVE-2025-70829 Medium · 5.7 CWE-200 Feb 17, 2026

Exposure of Sensitive Information in Running-elephant Datart

An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.