airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=1.1.3) potentially affected by CVE-2026-49297 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =1.1.3 Source cves: CVE-2026-49297 Source advisory:...

airflow-parse-bench (>=0.0.1, <=1.0.1), airflow-toolkit (0.13.3) +2 more potentially affected by CVE-2026-49297 via apache-airflow-providers-google (10.26.0)

apache-airflow-providers-google PYPI version 10.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-parse-bench =0.0.1, =0.11.1, =0.1.0, =0.1.1 Source cves: CVE-2026-49297 Source advisory:...

airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=1.1.3) potentially affected by CVE-2026-49297 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =1.1.3 Source cves: CVE-2026-49297 Source advisory:...

airflow-parse-bench (>=0.0.1, <=1.0.1), airflow-toolkit (0.13.3) +2 more potentially affected by CVE-2026-49297 via apache-airflow-providers-google (10.26.0)

apache-airflow-providers-google PYPI version 10.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-parse-bench =0.0.1, =0.11.1, =0.1.0, =0.1.1 Source cves: CVE-2026-49297 Source advisory:...

airflow-toolkit (0.13.3), airflow-tools (>=0.5.0, <=0.12.0) potentially affected by CVE-2026-50203 via apache-airflow-providers-sftp (4.11.1)

apache-airflow-providers-sftp PYPI version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-sftp and may be impacted: - airflow-toolkit 0.13.3 - airflow-tools =0.5.0, =0.12.0 Source cves: CVE-2026-50203 Source advisory:...

airflow-toolkit (0.13.3), airflow-tools (>=0.5.0, <=0.12.0) potentially affected by CVE-2026-50203 via apache-airflow-providers-sftp (4.11.1)

apache-airflow-providers-sftp PYPI version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-sftp and may be impacted: - airflow-toolkit 0.13.3 - airflow-tools =0.5.0, =0.12.0 Source cves: CVE-2026-50203 Source advisory:...

airflow-toolkit (0.13.3), airflow-tools (>=0.5.0, <=0.12.0) potentially affected by CVE-2026-50203 via apache-airflow-providers-sftp (4.11.1)

apache-airflow-providers-sftp PYPI version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-sftp and may be impacted: - airflow-toolkit 0.13.3 - airflow-tools =0.5.0, =0.12.0 Source cves: CVE-2026-50203 Source advisory:...

airflow-tools (>=0.3.1, <=0.6.3), apache-airflow-providers-common-io (>=1.0.0rc1, <=1.4.2rc1) +1 more potentially affected by CVE-2026-46764 via apache-airflow (2.8.0)

apache-airflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-tools =0.3.1, =1.0.0rc1, =1.4.2rc1 - flowpyter-task 1.1.0.post0.dev45 Source cves: CVE-2026-46764 Source advisory:...

airflow-clickhouse-plugin (1.2.0), airflow-tools (>=0.8.5, <=0.9.1) +2 more potentially affected by CVE-2026-46764 via apache-airflow (2.8.4)

apache-airflow PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.2.0 - airflow-tools =0.8.5, =0.0.4, =2.4.0rc1, =2.5.1 Source cves: CVE-2026-46764 Source advisory:...

airflow-dagfactory (0.19.1), airflow-tools (>=0.9.2, <=0.12.0) +3 more potentially affected by CVE-2026-46764 via apache-airflow (2.9.1)

apache-airflow PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-dagfactory 0.19.1 - airflow-tools =0.9.2, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-46764 Source advisory:...

airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-46764 via apache-airflow (2.4.3)

apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-46764 Source advisory: OSV:GHSA-QPHR-3MVQ-V466...

airflow-dagfactory (0.19.1), airflow-tools (>=0.9.2, <=0.12.0) +3 more potentially affected by CVE-2026-48726 via apache-airflow (2.9.1)

apache-airflow PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-dagfactory 0.19.1 - airflow-tools =0.9.2, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-48726 Source advisory:...

airflow-clickhouse-plugin (1.2.0), airflow-tools (>=0.8.5, <=0.9.1) +2 more potentially affected by CVE-2026-48726 via apache-airflow (2.8.4)

apache-airflow PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.2.0 - airflow-tools =0.8.5, =0.0.4, =2.4.0rc1, =2.5.1 Source cves: CVE-2026-48726 Source advisory:...

airflow-clickhouse-plugin (1.2.0), airflow-tools (>=0.8.5, <=0.9.1) +2 more potentially affected by CVE-2026-42360 via apache-airflow (2.8.4)

apache-airflow PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.2.0 - airflow-tools =0.8.5, =0.0.4, =2.4.0rc1, =2.5.1 Source cves: CVE-2026-42360 Source advisory:...

airflow-dagfactory (0.19.1), airflow-tools (>=0.9.2, <=0.12.0) +3 more potentially affected by CVE-2026-42360 via apache-airflow (2.9.1)

apache-airflow PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-dagfactory 0.19.1 - airflow-tools =0.9.2, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-42360 Source advisory:...

airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-42360 via apache-airflow (2.4.3)

apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-42360 Source advisory: OSV:GHSA-CG3X-89RC-X9MW...

airflow-tools (>=0.3.1, <=0.6.3), apache-airflow-providers-common-io (>=1.0.0rc1, <=1.4.2rc1) +1 more potentially affected by CVE-2026-42358 via apache-airflow (2.8.0)

apache-airflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-tools =0.3.1, =1.0.0rc1, =1.4.2rc1 - flowpyter-task 1.1.0.post0.dev45 Source cves: CVE-2026-42358 Source advisory:...

airflow-clickhouse-plugin (1.2.0), airflow-tools (>=0.8.5, <=0.9.1) +2 more potentially affected by CVE-2026-42358 via apache-airflow (2.8.4)

apache-airflow PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.2.0 - airflow-tools =0.8.5, =0.0.4, =2.4.0rc1, =2.5.1 Source cves: CVE-2026-42358 Source advisory:...

airflow-dagfactory (0.19.1), airflow-tools (>=0.9.2, <=0.12.0) +3 more potentially affected by CVE-2026-42358 via apache-airflow (2.9.1)

apache-airflow PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-dagfactory 0.19.1 - airflow-tools =0.9.2, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-42358 Source advisory:...

airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-40861 via apache-airflow (2.4.3)

apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-40861 Source advisory: OSV:GHSA-89CJ-XRPX-J79M...