Apache DolphinScheduler 3.4.3 Fixes Six Authorization Flaws That Leak Passwords and Kubernetes Credentials

Apache DolphinScheduler released fixes in version 3.4.3 for six authorization-related vulnerabilities that let authenticated but low-privileged users expose sensitive data (including Kubernetes kubeconfig and data source passwords), enumerate user accounts, and perform cross-project task and schedule modifications; Apache classifies one issue as critical and recommends upgrading to 3.4.3 and rotating exposed credentials.