CVE-2020-11978

CVE-2020-11978: Ejecución remota de código en los DAGs de ejemplo de Apache Airflow Información Descripción: Esta vulnerabilidad permite RCE cuando se cargan los DAGs de ejemplo de Airflow, potencialmente sin autenticación con CVE-2020-13927 Crédito CVE : xuxiang de DtDream security Versiones...

AirFlow < 2.4.0 - Remote Code Execution

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. id: CVE-2022-40127 info: name: AirFlow 2.4.0 -...

CVE-2020-11981-PoC

Ejemplo Construir el stand de demostración root@kitploit: docker-compose up -d VM docker-container: 172.18.0.2 Comando PoC root@kitploit: docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.tx...

GHSA-FGCH-86X8-FV43 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-49486 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-8G6F-QW9X-4Q6Q vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-15736 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-2R5M-76WX-56GX vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

CVE-2026-45360 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: mlrun-fips, keep-fips, datadog-agent-fips, keep, datadog-agent, mlrun, airflow...

CVE-2026-15925 vulnerabilities

Vulnerabilities for packages: mlrun-fips, keep-fips, datadog-agent-fips, keep, datadog-agent, mlrun, airflow...

CLEANSTART-2026-LT04051 Security fixes in airflow-3 3.3.1-r1

Package airflow-3 version 3.3.1-r1 fixes 6 vulnerabilities: CVE-2026-69247, CVE-2026-69248, CVE-2026-69249, CVE-2026-59884, CVE-2026-59885...

Airflow Experimental <1.10.11 - REST API Auth Bypass

Airflow's Experimental API prior 1.10.11 allows all API requests without authentication. id: CVE-2020-13927 info: name: Airflow Experimental 1.10.11 - REST API Auth Bypass author: pdteam severity: critical description: | Airflow's Experimental API prior 1.10.11 allows all API requests without...

GHSA-VXJ7-4XRP-5VR4 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-55558 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-54591 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-54590 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-2WXC-X7RJ-HG8F vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-QR67-GV47-XWWH vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-F2FF-P2WW-7P4P vulnerabilities

Vulnerabilities for packages: openstack-placement-2026.1-fips, openstack-glance-2025.2, openstack-placement-2025.1, superset, authentik-fips, openstack-nova-2025.2, openstack-glance-2025.1-fips, datahub-ingestion, openstack-horizon-2026.1, openstack-placement-2026.1, openstack-nova-2026.1,...