CVE-2024-25142 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-25142

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

PYSEC-2024-195

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

CVE-2024-25142

CVE-2024-25142 : The issue is in Apache Airflow where dynamic content did not return the Cache-Control header, potentially allowing browsers to store sensitive data in local cache. Affected version: Airflow prior to 2.9.2. The available connected documents confirm the root cause (missing Cache-Co...

CVE-2024-25142

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

CVE-2024-25142: Use of Web Browser Cache Containing Sensitive Information

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

Apache Airflow Security Vulnerability

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache USA Foundation. The platform is characterized by scalability and dynamic monitoring. A security vulnerability exists in Apache Airflow versions prior to 2.9.2 that stems from Airflow not...

PT-2024-4257 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.9.2 Description: The issue is related to the use of web browser cache containing sensitive information in Apache Airflow. Airflow did not return a "Cache-Control" header for dynamic content, which could resu...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: zarf, velero, policy-controller, rekor, bank-vaults, rclone, hugo, k8sgpt, py3-cassandra-medusa, grafana-agent-operator, fulcio, flux-source-controller, flux-image-reflector-controller, airflow, prometheus-operator, harbor-registry, opentelemetry-collector-contrib,...

GHSA-W235-7P84-XX57 vulnerabilities

Vulnerabilities for packages: py3-tornado, airflow, kubeflow-pipelines-visualization-server, dask-gateway...

GHSA-W235-7P84-XX57 vulnerabilities

Vulnerabilities for packages: py3-tornado, dask-gateway, kubeflow-pipelines-visualization-server, airflow...

GHSA-753J-MPMX-QQ6G vulnerabilities

Vulnerabilities for packages: py3-tornado, airflow, kubeflow-pipelines-visualization-server, dask-gateway...

GHSA-753J-MPMX-QQ6G vulnerabilities

Vulnerabilities for packages: py3-tornado, dask-gateway, kubeflow-pipelines-visualization-server, airflow...

Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2024-26529)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow version 2.9.0 suffers from a cross-site scripting vulnerability that...

BIT-AIRFLOW-2024-32077 Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: ggshield, confluent-docker-utils, nvidia-nsight-compute-13.2, request-1276, kubeflow-volumes-web-app, mlflow, py3-pipenv, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-cassandra-medusa, superset, patroni, kubeflow-katib, reflex, jwt-tool,...

GHSA-9WX4-H78V-VM56 vulnerabilities

Vulnerabilities for packages: ggshield, confluent-docker-utils, nvidia-nsight-compute-13.2, request-1276, kubeflow-volumes-web-app, mlflow, py3-pipenv, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-cassandra-medusa, superset, patroni, kubeflow-katib, reflex, jwt-tool,...