CLEANSTART-2026-GI56034 Security fix for CVE-2026-46745 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r5, airflow-3 3.2.1-r5

CVE-2026-46745 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW40229 Security fixes in airflow-3 3.1.8-r5

Package airflow-3 version 3.1.8-r5 fixes 19 vulnerabilities: CVE-2026-42526, CVE-2026-27173, CVE-2026-41018, CVE-2026-46745, CVE-2026-50203...

CVE-2026-46745

Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability CWE-90 that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP...