22 matches found
CVE-2023-42663
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated wit...
dbnd-airflow (>=0.24.14, <=0.25.15), dbnd-airflow-versioned-dag (>=0.24.14, <=0.25.15) +2 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.7)
apache-airflow PYPI version 1.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-airflow =0.24.14, =0.24.14, =0.24.14, =0.24.14, =0.25.7 Source cves: CVE-2023-42663 Source advisory: OSV:GHSA-32WR-QQW6-5MFP...
airflow-docker (>=0.1.1, <=0.5.0), airflow-indexima (>=1.0.1, <=2.2.1) +5 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.2)
apache-airflow PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =0.1.1, =1.0.1, =0.4.0rc2, =0.1.0, =3.0.0, =0.0.12, =1.0.1 Source cves: CVE-2023-42663 Source advisory:...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2023-42663...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-42663 Source advisory:...
dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.10)
apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-42663 Source advisory: OSV:GHSA-32WR-QQW6-5MFP...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2023-42663 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2023-42663 Source advisory: OSV:GHSA-32WR-QQW6-5MFP...
abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.11.0) +137 more potentially affected by CVE-2023-42663 via apache-airflow (>=1.8.2, <=2.7.1)
apache-airflow PYPI version =1.8.2, =0.8.44.4rc1, =0.1.0rc3, =0.2.9b1, =1.0.7, =0.5.1, =0.2.0, =0.1.0, =0.1.1, =0.0.7, =2.4.2, =1.0.1, =0.0.1, =0.0.11 and more Source cves: CVE-2023-42663 Source advisory: GHSA-32WR-QQW6-5MFP...
airflow-util-dv (>=1.2.1, <=1.6.2) potentially affected by CVE-2023-42663 via apache-airflow (1.10.1)
apache-airflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-util-dv =1.2.1, =1.6.2 Source cves: CVE-2023-42663 Source advisory: OSV:GHSA-32WR-QQW6-5MFP...
data-tracking (1.7.3) potentially affected by CVE-2023-42663 via apache-airflow (1.9.0)
apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2023-42663 Source advisory: OSV:PYSEC-2023-197...
airflow-docker (>=0.1.1, <=0.5.0), airflow-indexima (>=1.0.1, <=2.2.1) +5 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.2)
apache-airflow PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =0.1.1, =1.0.1, =0.4.0rc2, =0.1.0, =3.0.0, =0.0.12, =1.0.1 Source cves: CVE-2023-42663 Source advisory:...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2023-42663 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2023-42663 Source advisory: OSV:PYSEC-2023-197...
dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.10)
apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2023-42663 Source advisory: OSV:PYSEC-2023-197...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-42663 Source advisory:...
gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2023-42663 via apache-airflow (1.10.14)
apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2023-42663 Source advisory: OSV:PYSEC-2023-197...
abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.11.0) +32 more potentially affected by CVE-2023-42663 via apache-airflow (>=2.0.0rc3, <=2.7.1)
apache-airflow PYPI version =2.0.0rc3, =0.8.44.4rc1, =0.1.0rc3, =0.2.9b1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.0.4rc1, =0.0.0, =0.1.0, =0.5.4 and more Source cves: CVE-2023-42663 Source advisory: OSV:PYSEC-2023-197...
airflow-aggua-plugin (>=1.0.7, <=1.0.8), airflow-clickhouse-plugin (>=0.5.6, <=0.5.7.post1) +83 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.15)
apache-airflow PYPI version 1.10.15 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-aggua-plugin =1.0.7, =0.5.6, =0.1.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =2020.5.20rc1, =2021.2.5rc1, =2020.5.20rc1,...
airflow-util-dv (>=1.2.1, <=1.6.2) potentially affected by CVE-2023-42663 via apache-airflow (1.10.1)
apache-airflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-util-dv =1.2.1, =1.6.2 Source cves: CVE-2023-42663 Source advisory: OSV:PYSEC-2023-197...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2023-42663 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2023-42663...
abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.11.0) +137 more potentially affected by CVE-2023-42663 via apache-airflow (>=1.8.2, <=2.7.1)
apache-airflow PYPI version =1.8.2, =0.8.44.4rc1, =0.1.0rc3, =0.2.9b1, =1.0.7, =0.5.1, =0.2.0, =0.1.0, =0.1.1, =0.0.7, =2.4.2, =1.0.1, =0.0.1, =0.0.11 and more Source cves: CVE-2023-42663 Source advisory: MEND:CVE-2023-42663...