CVE-2025-50213 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WP53-J4WJ-2CFG vulnerabilities

Vulnerabilities for packages: reflex, semgrep, airflow, open-webui...

CVE-2026-24486 vulnerabilities

Vulnerabilities for packages: reflex, semgrep, airflow, open-webui...

CVE-2026-24486 vulnerabilities

Vulnerabilities for packages: reflex, tritonserver-backend-vllm-cuda-12.9, airflow, open-webui, semgrep, litellm, airflow-core...

GHSA-WP53-J4WJ-2CFG vulnerabilities

Vulnerabilities for packages: reflex, tritonserver-backend-vllm-cuda-12.9, airflow, open-webui, semgrep, litellm, airflow-core...

CVE-2025-68438 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2025-68675 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-7C2F-R6GC-H92H vulnerabilities

Vulnerabilities for packages: airflow...

BIT-AIRFLOW-2025-68675 Apache Airflow: proxy credentials for various providers might leak in task logs

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...

BIT-AIRFLOW-2025-68438 Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed core maxtemplatedfieldlength, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: kserve, py3-cassandra-medusa, open-webui, airflow, datadog-agent, az...

CVE-2026-21226 vulnerabilities

Vulnerabilities for packages: kserve, py3-cassandra-medusa, open-webui, airflow, datadog-agent, az...

CVE-2026-21226 vulnerabilities

Vulnerabilities for packages: datadog-agent, airflow, authentik-fips, az, datadog-agent-fips, request-1276, barman, authentik, open-webui, kserve, awx, pgadmin4, py3-cassandra-medusa, duplicity...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: datadog-agent, airflow, authentik-fips, az, datadog-agent-fips, request-1276, barman, authentik, open-webui, kserve, awx, pgadmin4, py3-cassandra-medusa, duplicity...

CVE-2025-68675 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

CVE-2025-68438 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

GHSA-7C2F-R6GC-H92H vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

GHSA-3QMM-R55X-HPXX vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

CVE-2025-68675

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...