GHSA-R75F-5X8P-QVMC vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WPFP-GWWC-VWQ6 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-QRC4-49GV-MV9M vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-PW6J-QG29-8W7F vulnerabilities

Vulnerabilities for packages: airflow, mitmproxy...

GHSA-XQMJ-J6MV-4862 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-VFFW-93WF-4J4Q vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-47101 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-4XGF-CPJX-PC3J vulnerabilities

Vulnerabilities for packages: airflow, semgrep, open-webui...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-5RVQ-CXJ2-64VF vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-50203 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-53538 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-47102 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-42203 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-53537 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-4XGF-CPJX-PC3J vulnerabilities

Vulnerabilities for packages: mcp-atlassian, lmcache-cuda-12.8, azureml-inference-server-http, open-webui, prefect-fips, tritonserver-backend-vllm-cuda-12.9, vllm-cuda-13.2, airflow-core, litellm, prefect, semgrep, azureml-inference-server-http-fips, vllm-openai-cuda-13.0, airflow-postgres-fips,...

CVE-2026-49468 vulnerabilities

Vulnerabilities for packages: airflow...

EUVD-2026-37520

A path traversal in the SFTP provider SFTPHook.retrievedirectory / SFTPOperatoroperation=get let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is a...

GHSA-QF38-JQ28-3CCQ Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory

A path traversal in the SFTP provider SFTPHook.retrievedirectory / SFTPOperatoroperation=get let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is a...