apache-airflow-core (3.0.3), apache-airflow-task-sdk (1.0.3) potentially affected by CVE-2025-54831 via apache-airflow (3.0.3)

apache-airflow PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-airflow-core 3.0.3 - apache-airflow-task-sdk 1.0.3 Source cves: CVE-2025-54831 Source advisory: GHSA-Q475-2PGM-7HVP...

apache-airflow-core (>=3.0.0, <=3.0.2), apache-airflow-providers-cohere (>=1.1.3rc1, <=1.4.0) +4 more potentially affected by CVE-2025-54831 via apache-airflow (>=3.0.0rc4, <=3.0.2)

apache-airflow PYPI version =3.0.0rc4, =3.0.0, =1.1.3rc1, =1.25.0rc1, =1.0.0, =1.16.0, =1.0.6, =1.0.9 Source cves: CVE-2025-54831 Source advisory: OSV:PYSEC-2025-85...

CVE-2025-54831

creationtimestamp| type| source ---|---|--- 2025-09-25 14:50:01+00:00| seen| https://seclists.org/oss-sec/2025/q3/198 2025-09-27 13:46:21+00:00| seen| https://bsky.app/profile/technadu.com/post/3lzt4k3aiw22k 2025-09-30 22:33:42+00:00| seen|...