CVE-2026-96285

Apache Airflow version 3.3.1 contains an incomplete fix for CVE-2026-67260. The vulnerability exists because the software performs a type check on the decoded next_kwargs value only after deserializing the entire stored payload. This allows a Dag author to trigger the execution of constructors fo...