3308 matches found
CVE-2026-24098
CVE-2026-24098 affects Apache Airflow versions before 3.1.7. Authenticated UI users with permission to one or more Dags can view import errors generated by other Dags they should not access. The issue is remedied by upgrading to Airflow 3.1.7 or later; no further exploit details are provided in t...
CVE-2026-24098 Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors
Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have access to. Users are advised to upgrade to 3.1.7 or later, which resolves this issue...
PT-2026-7103
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.1.7 Description Authenticated users of the Airflow user interface, with permissions to specific Dags, could view import errors generated by other Dags they were not authorized to access. Recommendations Upgra...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Prior to Apache Airflow 3.1.7, there were security...
PT-2026-7102
Name of the Vulnerable Software and Affected Versions Apache Airflow versions 3.1.0 through 3.1.6 Description An authorization flaw exists in Apache Airflow that could allow an authenticated user with limited task permissions to view task logs without proper authorization. The issue affects syste...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Versions 3.1.0 to 3.1.6 of Apache Airflow contain securit...
Exploit for OS Command Injection in Apache Airflow
Example Build demo stand bash docker-compose up -d...
GHSA-9R64-3WMC-X8M8 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2025-50213 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2024-23342 vulnerabilities
Vulnerabilities for packages: airflow, open-webui...
GHSA-WJ6H-64FC-37MP vulnerabilities
Vulnerabilities for packages: airflow, open-webui...
GHSA-9R64-3WMC-X8M8 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2024-23342 vulnerabilities
Vulnerabilities for packages: awx, open-webui, airflow...
GHSA-WJ6H-64FC-37MP vulnerabilities
Vulnerabilities for packages: awx, open-webui, airflow...
CVE-2025-50213 vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-WP53-J4WJ-2CFG vulnerabilities
Vulnerabilities for packages: airflow, open-webui, reflex, semgrep...
CVE-2026-24486 vulnerabilities
Vulnerabilities for packages: airflow, open-webui, reflex, semgrep...
CVE-2026-24486 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, airflow, reflex, litellm, semgrep, open-webui, airflow-core...