airflow-docker (>=0.1.1, <=0.5.0), airflow-indexima (>=1.0.1, <=2.2.1) +5 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.2)

apache-airflow PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =0.1.1, =1.0.1, =0.4.0rc2, =0.1.0, =3.0.0, =0.0.12, =1.0.1 Source cves: CVE-2025-27555 Source advisory:...

airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2025-27555 via apache-airflow (1.10.5)

apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2025-27555 Source advisory: OSV:PYSEC-2026-2347...

dbnd-airflow (>=0.24.14, <=0.25.15), dbnd-airflow-versioned-dag (>=0.24.14, <=0.25.15) +2 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.7)

apache-airflow PYPI version 1.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-airflow =0.24.14, =0.24.14, =0.24.14, =0.24.14, =0.25.7 Source cves: CVE-2025-27555 Source advisory: OSV:PYSEC-2026-2347...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2025-27555 Source advisory: OSV:PYSEC-2026-2347...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2025-27555 Source advisory:...

abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +75 more potentially affected by CVE-2025-27555 via apache-airflow (>=2.0.0rc3, <=2.11.0)

apache-airflow PYPI version =2.0.0rc3, =0.8.44.4rc1, =0.1.0rc3, =0.2.1, =0.2.9b1, =0.6.0, =0.2.0, =0.0.1, =0.0.3, =0.0.6, =0.0.8 - airflow-provider-ibm-db2 0.1.2 and more Source cves: CVE-2025-27555 Source advisory: OSV:PYSEC-2026-2347...

CVE-2025-27555 vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

data-tracking (1.7.3) potentially affected by CVE-2025-27555 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2025-27555 Source advisory: OSV:GHSA-8R55-RV5W-6PFM...

airflow-docker (>=0.1.1, <=0.5.0), airflow-indexima (>=1.0.1, <=2.2.1) +5 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.2)

apache-airflow PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =0.1.1, =1.0.1, =0.4.0rc2, =0.1.0, =3.0.0, =0.0.12, =1.0.1 Source cves: CVE-2025-27555 Source advisory:...

dbnd-airflow (>=0.24.14, <=0.25.15), dbnd-airflow-versioned-dag (>=0.24.14, <=0.25.15) +2 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.7)

apache-airflow PYPI version 1.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-airflow =0.24.14, =0.24.14, =0.24.14, =0.24.14, =0.25.7 Source cves: CVE-2025-27555 Source advisory: OSV:GHSA-8R55-RV5W-6PFM...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2025-27555 Source advisory:...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2025-27555 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2025-27555 Source advisory: OSV:GHSA-8R55-RV5W-6PFM...

airflow-aggua-plugin (>=1.0.7, <=1.0.8), airflow-clickhouse-plugin (>=0.5.6, <=0.5.7.post1) +81 more potentially affected by CVE-2025-27555 via apache-airflow (1.10.15)

apache-airflow PYPI version 1.10.15 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-aggua-plugin =1.0.7, =0.5.6, =0.1.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =2020.5.20rc1, =2021.2.5rc1, =2020.5.20rc1,...

abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +75 more potentially affected by CVE-2025-27555 via apache-airflow (>=2.0.0rc3, <=2.11.0)

apache-airflow PYPI version =2.0.0rc3, =0.8.44.4rc1, =0.1.0rc3, =0.2.1, =0.2.9b1, =0.6.0, =0.2.0, =0.0.1, =0.0.3, =0.0.6, =0.0.8 - airflow-provider-ibm-db2 0.1.2 and more Source cves: CVE-2025-27555 Source advisory: OSV:GHSA-8R55-RV5W-6PFM...

abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +75 more potentially affected by CVE-2025-27555 via apache-airflow (>=2.0.0rc3, <=2.11.0)

apache-airflow PYPI version =2.0.0rc3, =0.8.44.4rc1, =0.1.0rc3, =0.2.1, =0.2.9b1, =0.6.0, =0.2.0, =0.0.1, =0.0.3, =0.0.6, =0.0.8 - airflow-provider-ibm-db2 0.1.2 and more Source cves: CVE-2025-27555 Source advisory: GHSA-8R55-RV5W-6PFM...

CVE-2025-27555

creationtimestamp| type| source ---|---|--- 2026-02-23 16:48:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mfk47clem722 2026-02-24 13:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfmavwexlu2v...

CVE-2023-27555

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers. IBM X-Force ID: 249187...

Security Bulletin: IBM DB2 used by IBM Security Verify Governance, Identity Manager virtual appliance component has multiple vulnerabilities

Summary Information about security vulnerabilities affecting IBM DB2 has been published in security bulletins. IBM Security Verify Governance, Identity Manager virtual appliance component ships with IBM DB2. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

IBM DB2 11.1 < 11.5.7.0 Special Build 29113 / 11.5.8.0 < 11.5.8.0 Special Build 29133 Denial of Service (Unix)

According to its self-reported version number, IBM Db2 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server

Summary IBM Db2 is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 have been published in a security bulletin CVE-2023-29257, CVE-2023-29255, CVE-2023-27555, CVE-2023-26021, CVE-2023-25930, CVE-2023-26022, CVE-2023-27559. Vulnerability Detail...