ablog (>=0.10.3, <=0.10.7), acumos (>=0.9.3, <=0.9.4) +13 more potentially affected by CVE-2026-102598 via werkzeug (1.0.0rc1)

werkzeug PYPI version 1.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - ablog =0.10.3, =0.9.3, =0.7.0rc0, =0.26.0, =0.26.0, =5.0.19, =0.2.11, =0.51.0, =0.51.6, =0.52.0, =0.52.0, =0.53.0, =0.53.4 Source cves:...

a4t-sale-discount (5.0.2), acumos (0.9.2) +414 more potentially affected by CVE-2026-102598 via werkzeug (0.16.1)

werkzeug PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a4t-sale-discount 5.0.2 - acumos 0.9.2 - airflow-aggua-plugin =1.0.7, =0.5.6, =0.1.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =4.0.0, =1.3.0,...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), rcd-dev-kit (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.1)

snowflake-connector-python PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - apache-airflow-providers-snowflake =2.4.0rc1, =0.0.11, =1.1.0 Source cves: CVE-2026-86597 Source advisory:...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102267 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102270 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

airflow-indexima (>=1.0.1, <=2.2.1), arcli (>=0.1.0, <=0.1.1) +69 more potentially affected by CVE-2026-87819 via gitpython (2.1.15)

gitpython PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - airflow-indexima =1.0.1, =0.1.0, =0.3.0rc1, =0.1.0, =0.7.0, =0.2.0, =0.11.0, =0.1.0, =0.6.0, =0.3.0, =2.0.0, =2019.2.3rc0, =2021.7.0 and more...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

CVE-2026-101917 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

CVE-2026-102267 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

CVE-2026-102268 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

GHSA-9V7F-9G4P-FFGJ vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

GHSA-FFC3-869F-JXW9 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

CVE-2026-102274 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, semgrep, py3-cassandra-medusa, openstack-placement-2025.1-fips, litellm, superset-fips, openstack-heat-2026.1, openstack-nova-2025.2, airflow-postgres-fips, kserve, datahub-ingestion-fips, openstack-octavia-2025.2,...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102270 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102269 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102267 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

Insertion of Sensitive Information into Log File

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the execute method in azureblobtoteradata.py and s3toteradata.py, when no...