188 matches found
CVE-2026-104851 vulnerabilities
Vulnerabilities for packages: nemo-gym, airflow-core, mlrun, nemo, kserve, mlrun-fips, kserve-huggingfaceserver-cuda-13.3, nemo-rl-cuda-13.0, open-webui...
GHSA-27VJ-QCQG-25RC vulnerabilities
Vulnerabilities for packages: nemo-gym, airflow-core, mlrun, nemo, kserve, mlrun-fips, kserve-huggingfaceserver-cuda-13.3, nemo-rl-cuda-13.0, open-webui...
GHSA-W6J9-CWV2-H6WQ vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-101917 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-102268 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-9V7F-9G4P-FFGJ vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-102271 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-FFC3-869F-JXW9 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-102274 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-2GX3-RCP4-G85Q vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-P4G4-X82P-Q773 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-102267 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +46 more potentially affected by CVE-2026-75158 via apache-airflow-core (>=3.0.0rc2, <=3.3.1)
apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.4.0 and more Source cves: CVE-2026-75158 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-20044967...
Exposure of Data Element to Wrong Session
Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the GET /api/v2/assets/events endpoint in assets.py, which applies only a global "Assets" resource check via requiresaccessassetmethod="GET" and no per-DAG row filter. A caller with read...
airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +46 more potentially affected by CVE-2026-86473 via apache-airflow-core (>=3.0.0rc2, <=3.3.1)
apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.4.0 and more Source cves: CVE-2026-86473 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-20044964...
Insufficient Session Expiration
Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via the logout endpoint in airflow/apifastapi/coreapi/routes/public/auth.py, which previously read only the token cookie when revoking credentials. A client authenticating with an Authorization: Bearer...
airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +12 more potentially affected by CVE-2026-82355 via apache-airflow-core (>=3.3.0, <=3.3.1)
apache-airflow-core PYPI version =3.3.0, =0.5.0, =3.3.0, =1.3.0, =14.3.6rc1, =7.5.0rc1, =2.0.5, =1.6.23, =2.1.1, =1.11.1rc1, =1.44.1rc1, =0.2.0rc1, =1.34.6, =5.7.28, =5.9.2 Source cves: CVE-2026-82355 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-20044951...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in JWTRefreshMiddleware's caller resolution, which resolves the caller from the session cookie and ignores an accompanying Authorization: Bearer token, inverting the intended precedence of bearer over cookie. An...
airflow-calendar (>=0.5.0, <=0.9.1), airflow-clickhouse-plugin (1.7.0) +19 more potentially affected by CVE-2026-86473 via apache-airflow-core (>=3.2.0, <=3.3.2rc1)
apache-airflow-core PYPI version =3.2.0, =0.5.0, =3.2.0, =1.2.0, =1.1.0, =13.0.2, =7.2.0, =1.18.3, =1.4.2, =2.1.1, =1.10.3, =1.41.2, =1.44.6 and more Source cves: CVE-2026-86473 Source advisory: MEND:CVE-2026-86473...
airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +45 more potentially affected by CVE-2026-75158 via apache-airflow-core (>=3.0.0, <=3.3.2rc1)
apache-airflow-core PYPI version =3.0.0, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0, =1.1.3rc1, =1.4.0 and more Source cves: CVE-2026-75158 Source advisory: MEND:CVE-2026-75158...