Improper Removal of Sensitive Information Before Storage or Transfer

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the serialization for rendered...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plugin (1.5.0) +19 more potentially affected by CVE-2025-66388 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.1.3)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =0.6.1, =1.10.7, =0.1.0, =1.4.3, =1.2.10, =3.0.0rc3, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.25.0rc1, =3.12.0rc1, =0.0.4, =0.0.6 and more Source cves: CVE-2025-66388 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-14459396...

apache-airflow (>=3.1.0, <=3.1.4rc2), apache-airflow-core (>=3.1.0, <=3.1.3) +6 more potentially affected by CVE-2025-66388 via apache-airflow-task-sdk (>=1.1.0, <=1.1.4rc2)

apache-airflow-task-sdk PYPI version =1.1.0, =3.1.0, =3.1.0, =1.6.0, =1.5.3, =1.26.0, =2.0.2, =0.4.0, =1.8.0 Source cves: CVE-2025-66388 Source advisory: MEND:CVE-2025-66388...

apache-airflow (>=3.0.0, <=3.0.5rc3), apache-airflow-providers-cohere (>=1.1.3rc1, <=1.4.0) +3 more potentially affected by CVE-2025-54941 via apache-airflow-core (>=3.0.0, <=3.0.5rc3)

apache-airflow-core PYPI version =3.0.0, =3.0.0, =1.1.3rc1, =1.0.0, =1.0.6, =1.0.9 Source cves: CVE-2025-54941 Source advisory: MEND:CVE-2025-54941...

apache-airflow (>=3.0.3, <=3.0.4rc2), apache-airflow-task-sdk (>=1.0.3rc1, <=1.0.4rc1) potentially affected by CVE-2025-54831 via apache-airflow-core (>=3.0.3, <=3.0.4rc2)

apache-airflow-core PYPI version =3.0.3, =3.0.3, =1.0.3rc1, =1.0.4rc1 Source cves: CVE-2025-54831 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-13053589...