CLEANSTART-2026-KA71089 Security fixes in airflow-3 3.1.8-r2

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 18 Views

Security fixes in airflow version 3.1.8-r2 for package airflow-3 address five vulnerabilities.

Reporter	Title	Published	Views	Family All 440
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	28 Sep 202613:49	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	18 Sep 202614:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers July 2026	5 Aug 202607:34	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in Watson Data Intelligence	18 Aug 202608:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	17 Jul 202608:22	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	8 Oct 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Starlette (CVE-2026-54283)	21 Sep 202608:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to HTTP Request/Response Smuggling in Starlette [CVE-2026-48710]	27 Jul 202620:25	–	ibm
GithubExploit	Exploit for CVE-2026-48710	28 May 202609:57	–	githubexploit

Source	Link
github	www.github.com/apache/airflow

18 Sep 2026 12:17Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5 - 9.8

CVSS 49.3

EPSS0.07056

SSVC

airflow version 3.1.8-r2 security fixes package airflow-3 five vulnerabilities