CVE-2025-69226 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2025-69229 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-MQQC-3GQH-H2X8 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2025-69224 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-6MQ8-RVHQ-8WGG vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-6JHG-HG63-JVVF vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-69F9-5GXW-WVC2 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2025-69230 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2025-69227 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2025-69225 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2025-69228 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-54JQ-C3M8-4M76 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-FH55-R93G-J68G vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-G84X-MCQJ-X9QQ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

GHSA-JJ3X-WXRX-4X23 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, dask-kubernetes, apache-beam-python-3.11-sdk, open-webui, py3-vllm-cuda-12.4, checkov, py3-cassandra-medusa, authentik, py3.13-scanner-test-libraries-aiohttp, kserve, awx, gitlab-cng, airflow...

CVE-2022-27949

A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed for example when they were depending on past and previous instances of the task failed. This issue affects Apache Airflow prior to 2.3.1...

CVE-2019-12398

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected...

Sensitive Information Disclosure

apacheairflow is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper redaction of secret values in rendered templates, which allows authenticated users to view sensitive secrets without appropriate authorization...

Remote Code Execution (RCE)

Apache Airflow Providers Edge3 is vulnerable to Remote Code Execution RCE. The vulnerability is due to exposure of a non-public Worker RPC API enabled when the Edge3 provider was installed on Airflow 2, where development-only APIs intended for internal testing allowed DAG authors to execute...

Apache Airflow Information Disclosure Vulnerability (CNVD-2026-00003)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform with the creation, management and monitoring of workflow functions. The platform is scalable and dynamic monitoring and other features. Apache Airflow suffers from an information disclosure vulnerability th...