Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/08/12 6:31 p.m.•16 views

Apache Airflow environment-variable secrets backend permits cross-team credential use

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are...

5.4CVSS6AI score0.00342EPSS
SaveExploits0References11Affected Software1
osv_ghsa
osv_ghsa
•added 2026/08/12 6:31 p.m.•19 views

GHSA-75MG-C62R-V95G Apache Airflow environment-variable secrets backend permits cross-team credential use

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are...

5.4CVSS6AI score0.00342EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•7 views

PT-2026-80677

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are...

5.4CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•11 views

PT-2026-105491

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are...

5.4CVSS6AI score0.00342EPSS
SaveExploits0References12
Rows per page
Query Builder