CLEANSTART-2026-PH27311 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-NP36052 Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data"

Security vulnerability affects the airflow-3 package. Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data"...

CLEANSTART-2026-JT70619 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-AA29461 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-RC93064 Security fix for CVE-2026-24049 applied in: airflow-3 3.0.6-r1, aws-cli 2.32.34-r0, python3 3.14.0-r0

CVE-2026-24049 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN51802 Security fix for CVE-2026-27448 applied in: airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, az 2.84.0-r0, pritunl 1.30.3431.73-r1

CVE-2026-27448 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY41543 Security fix for CVE-2025-69277 applied in: airflow-3 3.0.6-r1, pritunl 1.30.3431.73-r1

CVE-2025-69277 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QL97043 Security fix for CVE-2026-34525 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HO43212 Security fix for CVE-2026-45186 applied in: airflow-3 3.0.6-r0, airflow-3 3.2.2.-r0, aws-cli 2.35.9-r2, ingress-nginx-controller 1.14.5-r2

CVE-2026-45186 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QQ77815 Security fix for CVE-2026-57585 applied in: airflow-3 3.1.8-r5, airflow-3 3.2.1-r5, apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, miniforge3 26.1.0.0-r4, miniforge3 26.1.1.0-r3, miniforge3 26.3.2.0-r0, py3.11-pip 26.2-r1

CVE-2026-57585 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EW07034 Security fix for CVE-2026-54282 applied in: airflow-3 3.0.6-r5, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0, litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2026-54282 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ON23616 Security fix for CVE-2026-59886 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r6, airflow-3 3.2.1-r6, airflow-3 3.2.2-r1, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, apache-superset 6.1.0-r1, k8s-sidecar 2.6.1-r0, kserve-storage-controller 0.19.0-r0, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-59886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EM41513 Security fix for CVE-2026-59885 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r6, airflow-3 3.2.1-r6, airflow-3 3.2.2-r1, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, apache-superset 6.1.0-r1, k8s-sidecar 2.6.1-r0, kserve-storage-controller 0.19.0-r0, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-59885 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RT57573 Security fix for CVE-2026-59884 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r6, airflow-3 3.2.1-r6, airflow-3 3.2.2-r1, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, apache-superset 6.1.0-r1, k8s-sidecar 2.6.1-r0, kserve-storage-controller 0.19.0-r0, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-59884 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IO67375 Security fix for CVE-2026-40347 applied in: airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, kserve-storage-controller 0.19.0-r0

CVE-2026-40347 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TX03176 Security fix for CVE-2026-28684 applied in: airflow-3 3.0.6-r1, apache-superset 5.0.0-r7, kserve-storage-controller 0.19.0-r0

CVE-2026-28684 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QH29600 Security fix for CVE-2026-69243 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r1

CVE-2026-69243 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UK19001 Security fix for CVE-2026-59881 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, kserve-storage-controller 0.19.0-r0

CVE-2026-59881 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SR43312 Security fix for CVE-2026-69247 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, az 2.84.0-r6, az 2.86.0-r1, az 2.87.0-r1, az 2.89.1-r3, kserve-storage-controller 0.19.0-r0, litellm-database 1.94.3-r0

CVE-2026-69247 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WP84262 Security fix for CVE-2026-69249 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, airflow-3 3.3.1-r1, az 2.84.0-r6, az 2.86.0-r1, az 2.87.0-r1, az 2.89.1-r3, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r1, litellm-database 1.94.3-r0

CVE-2026-69249 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...