CLEANSTART-2026-IW40229 Security fixes in airflow-3 3.1.8-r5

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Airflow-3 version 3.1.8-r5 fixes nineteen vulnerabilities including listed CVEs.

Reporter	Title	Published	Views	Family All 454
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in click-8.1.8-py3-none-any.whl	13 May 202616:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by use of a broken cryptographic algorithm vulnerability due to Paramiko	15 Jul 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package	18 May 202617:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by a command injection vulnerability due to Click	8 Jul 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Pallets Click bundled with IBM Fusion and IBM Fusion HCI	13 Jul 202619:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities (CVE-2026-7246)	29 Jun 202612:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2026	12 Jun 202622:52	–	ibm
ATTACKERKB	CVE-2026-12797	21 Jun 202609:15	–	attackerkb
ATTACKERKB	CVE-2026-41016	30 Apr 202609:09	–	attackerkb

Source	Link
github	www.github.com/apache/airflow

01 Aug 2026 18:36Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.5 - 9.1

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.009

SSVC