PYSEC-2026-172

A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking e.g. nested password / token / secret / apikey keys inside a JSON template structure to be bypassed when the rendered field exceeded core maxtemplatedfieldlength: Airflow stringified the structure befor...

CVE-2025-68438

creationtimestamp| type| source ---|---|--- 2026-01-15 20:40:30+00:00| seen| https://seclists.org/oss-sec/2026/q1/70 2026-01-15 22:02:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mcilk7q4om23 2026-01-16 11:20:06+00:00| seen|...