11 matches found
Key Exchange without Entity Authentication
Overview apache-airflow-providers-sftp is a Provider package apache-airflow-providers-sftp for Apache Airflow Affected versions of this package are vulnerable to Key Exchange without Entity Authentication via the deferrable code paths SFTPTrigger, SFTPHookAsync, and SFTPClientPool, which disable...
9.1CVSS5.8AI score0.0038EPSS
SaveExploits0References2
20