Severity: important Affected versions: - Apache HugeGraph-Server 1.0 ~ 1.3 (before 1.5.0) Description: Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. Users are recommended to upgrade to version 1.5.0, which fixes the issue. Credit: L0ne1y (reporter) References: - https://hugegraph.apache.org/docs/guides/security/ - https://lists.apache.org/thread/ykzx1076f4mjv0vf19lkz4bgnlb6qx8f - https://www.cve.org/CVERecord?id=CVE-2024-43441 Apache HugeGraph PPMC