50 matches found
GHSA-V3Q9-HJ7J-63HQ vulnerabilities
Vulnerabilities for packages: airflow-core...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: awx, py3-cassandra-medusa, datahub-ingestion-fips, lmcache-cuda-12.8, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, kserve, dask-kubernetes, apache-beam-python-3.13-sdk, puppygraph-python, open-webui, text-generation-inference,...
CVE-2026-53533 vulnerabilities
Vulnerabilities for packages: airflow-core...
GHSA-MQ44-7P77-Q5H7 vulnerabilities
Vulnerabilities for packages: awx, py3-cassandra-medusa, datahub-ingestion-fips, lmcache-cuda-12.8, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, kserve, dask-kubernetes, apache-beam-python-3.13-sdk, puppygraph-python, open-webui, text-generation-inference,...
Use of Incorrectly-Resolved Name or Reference
Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference through the resourcename function in permissions.py and the mirrored core permissions module. An attacker can gain global read/edit access to all DAGs by creating or targeting a DAG with the...
Insufficient Session Expiration
Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via the dep.source and dep.target fields in the scheduling graph endpoint. An attacker can obtain identifiers of resources they are not authorized to access by inspecting dependency information exposed...
GHSA-4XGF-CPJX-PC3J vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-13.0, airflow, mcp-atlassian, airflow-core, semgrep, prefect-fips, tritonserver-backend-vllm-cuda-12.9, vllm-cuda-13.2, prefect, litellm, open-webui, azureml-inference-server-http-fips, azureml-inference-server-http, lmcache-cuda-12.8,...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the scheduler-side deadline-reference decoder SerializedCustomReference.deserializereference. A DAG author whose code reaches the scheduler — the default on single-host deployments where the DAG...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the airflow.utils.email process. An attacker can intercept sensitive information, such as SMTP authentication credentials and email contents, by performing a man-in-the-middle attack during the STARTTL...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the handling of rendered template fields when the length exceeds the configured maximum, causing nested sensitive keys within JSON structures to be stringified before redaction and...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the str.lstrip function used for validating JWT tokens against Dag IDs. An attacker can gain unauthorized access to other Dags' log data by crafting JWT tokens that exploit character overlap in Dag names. Note...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the /api/v2/connections/connectionid REST API endpoint. An attacker can access sensitive credential information stored in the extra JSON blob by making authenticated requests with...
EUVD-2026-33594
Apache Airflow's EmailOperator and the underlying airflow.utils.email helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used email smtpstarttls=True without email smtpssl. An attacker positioned between the worker and the configured SMTP...
CVE-2026-49267 Apache Airflow: No certificate validation on SMTP STARTTLS connections
Apache Airflow's EmailOperator and the underlying airflow.utils.email helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used email smtpstarttls=True without email smtpssl. An attacker positioned between the worker and the configured SMTP...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to allowing users with asset materialize permissions to trigger DAGs outside of their permissions. Remediation Upgrade apache-airflow-core to version 3.2.0b2 or higher. References - Apache Mailing List - GitH...
Generation of Error Message Containing Sensitive Information
Overview Affected versions of this package are vulnerable to Generation of Error Message Containing Sensitive Information due to exposing exception/stack trace of errors even if api/exposestacktraces was set to false. That could lead to exposing additional information to potential attacker...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in redactval, whose secret value redaction sets maxdepth=1 and therefore does not properly extend to values in nested JSON objects. An attacker can see such nested JSON values responses...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data for the accesskey and connectionstring properties, which were not properly masked as sensitive information. An attacker can obtain confidential credentials by accessing the Connection UI...