GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2025-68675 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-7C2F-R6GC-H92H vulnerabilities

Vulnerabilities for packages: airflow...

BIT-AIRFLOW-2025-68675 Apache Airflow: proxy credentials for various providers might leak in task logs

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...

BIT-AIRFLOW-2025-68438 Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed core maxtemplatedfieldlength, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, airflow, az, datadog-agent, kserve...

CVE-2026-21226 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, airflow, az, datadog-agent, kserve...

CVE-2026-21226 vulnerabilities

Vulnerabilities for packages: awx, authentik-fips, airflow, duplicity, datadog-agent-fips, pgadmin4, datadog-agent, kserve, open-webui, py3-cassandra-medusa, authentik, barman, request-1276, az...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: awx, authentik-fips, airflow, duplicity, datadog-agent-fips, pgadmin4, datadog-agent, kserve, open-webui, py3-cassandra-medusa, authentik, barman, request-1276, az...

CVE-2025-68675 vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

CVE-2025-68438 vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

GHSA-7C2F-R6GC-H92H vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow-core, airflow...

CVE-2025-68438

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed core maxtemplatedfieldlength, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include...

CVE-2025-68675

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...

Insertion of Sensitive Information into Log File

Overview apache-airflow-providers-microsoft-azure is a Provider package apache-airflow-providers-microsoft-azure for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the proxies and proxy fields in a Connection. An attacker ca...

Insertion of Sensitive Information into Log File

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the proxies and proxy fields in a Connection. An...

GHSA-3QMM-R55X-HPXX Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed core maxtemplatedfieldlength, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include...

Apache Airflow proxy credentials for various providers might leak in task logs

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the serialization for rendered...