Apache Airflow code execution vulnerability (CNVD-2024-33592)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from a code execution vulnerability that can be exploited by...

PT-2024-5041 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.9.3 Description: The issue is related to the lack of protection for the web page structure in the Provider component of Apache Airflow, allowing an authenticated attacker to inject a malicious link when...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: airflow, py3.9-setuptools, checkov, k8s-sidecar, nvidia-nsight-compute-13.2, request-1276, nemo, nvidia-nsight-compute-13.1, az, py3-pipenv, reflex, kubeflow-katib, superset, py3-cassandra-medusa...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: airflow, py3.9-setuptools, checkov, k8s-sidecar, nvidia-nsight-compute-13.2, request-1276, nemo, nvidia-nsight-compute-13.1, az, py3-pipenv, reflex, kubeflow-katib, superset, py3-cassandra-medusa...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: k8s-sidecar, dask-gateway, confluent-docker-utils, az, kubeflow-volumes-web-app, py3-pipenv, kubeflow-katib, superset, kubeflow-pipelines, nvidia-nsight-compute-13.2, py3-certifi, nvidia-nsight-compute-13.1, py3-cassandra-medusa, kubeflow-jupyter-web-app, barman,...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, dask-gateway, confluent-docker-utils, az, kubeflow-volumes-web-app, py3-pipenv, kubeflow-katib, superset, kubeflow-pipelines, nvidia-nsight-compute-13.2, py3-certifi, nvidia-nsight-compute-13.1, py3-cassandra-medusa, kubeflow-jupyter-web-app, barman,...

Malicious code in glovo-data-platform-declarative-airflow (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5182 Malicious code in glovo-data-platform-declarative-airflow (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5027 Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-airflow-operators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5026 Malicious code in data-platform-airflow-operators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Vulnerability: The software used for creating, monitoring, and orchestrating data processing scripts in Apache Airflow is vulnerable due to a flaw related to browser caching, which allows attackers to disclose protected information.

The vulnerability of Apache Airflow’s software for creating, monitoring, and orchestrating data processing scenarios is related to the disclosure of information through browser caching. Exploiting this vulnerability can allow attackers to disclose sensitive information via the Cache-Control heade...

BIT-AIRFLOW-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

Apache Airflow does not return the "Cache-Control" header for dynamic content

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

GHSA-9XPJ-62MM-24H2 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-9XPJ-62MM-24H2 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-9XPJ-62MM-24H2 Apache Airflow does not return the "Cache-Control" header for dynamic content

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

PYSEC-2024-195

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser.This issue affects Apache...

PYSEC-2024-195

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...