3308 matches found
GHSA-GFW7-2V73-69WG Apache Airflow error reporting may expose full kwargs
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
CVE-2025-65995
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
CVE-2025-65995
Airflow CVE-2025-65995 affects the UI error-reporting path: if a DAG fails during parsing, full operator kwargs (potentially containing secrets) could be exposed in tracebacks to users with DAG viewing permissions. Affected products are Apache Airflow; root cause is leakage of sensitive values vi...
CVE-2025-65995 Apache Airflow: Disclosure of secrets to UI via kwargs
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
CVE-2025-65995 Apache Airflow: Disclosure of secrets to UI via kwargs
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
CVE-2025-65995
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
CVE-2025-65995 Apache Airflow: Disclosure of secrets to UI via kwargs
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Versions of Apache Airflow prior to 3.1.4 and 2.11.1...
ROOT-APP-PYPI-CVE-2022-41672 CVE-2022-41672 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-41672 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-37379 CVE-2023-37379 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-37379 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-42781 CVE-2023-42781 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-42781 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-39508 CVE-2023-39508 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-39508 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-35908 CVE-2023-35908 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-35908 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-46215 CVE-2023-46215 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-46215 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-22888 CVE-2023-22888 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-22888 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-40611 CVE-2023-40611 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-40611 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-40127 CVE-2022-40127 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-40127 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-50944 CVE-2023-50944 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-50944 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...