example-pkg-naturalett (>=14.4.0, <=14.4.8) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (2.0.0)

apache-airflow-providers-cncf-kubernetes PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.8 Source cves: CVE-2026-27173 Source...

mojap-airflow-tools (>=2.0.1, <=2.1.1) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools =2.0.1, =2.1.1 Source cves: CVE-2026-27173 Source advisory:...

mojap-airflow-tools (2.0.0) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (2.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools 2.0.0 Source cves: CVE-2026-27173 Source advisory:...

dag-factory (0.23.0a3), dataflow-airflow (>=2.10.5, <=2.10.10) +3 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (>=10.4.2rc1, <=10.10.0)

apache-airflow-providers-cncf-kubernetes PYPI version =10.4.2rc1, =2.10.5, =0.4.3, =0.0.1rc1, =2.10.7rc1, =2.10.11rc5 Source cves: CVE-2026-27173 Source advisory: OSV:PYSEC-2026-2365...

apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.0.2)

apache-airflow-providers-cncf-kubernetes PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =2.0.0 - example-pkg-naturalett 14.7.0 Source...

flowui-project (>=0.0.9, <=0.0.13) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (4.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - flowui-project =0.0.9, =0.0.13 Source cves: CVE-2026-27173 Source advisory:...

openmetadata-airflow-managed-apis (>=0.1.0, <=0.10.0.1) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (6.1.0)

apache-airflow-providers-cncf-kubernetes PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - openmetadata-airflow-managed-apis =0.1.0, =0.10.0.1 Source cves: CVE-2026-27173...

dataverk-airflow (>=1.8.0, <=1.8.2), plexflow (>=0.0.168, <=0.0.180) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (8.4.2)

apache-airflow-providers-cncf-kubernetes PYPI version 8.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - dataverk-airflow =1.8.0, =0.0.168, =0.0.180 Source cves: CVE-2026-27173 Source...

airflow-duckdb (>=0.0.1, <=0.1.2), airflow-tools (0.1.2) +2 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (7.14.0)

apache-airflow-providers-cncf-kubernetes PYPI version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - airflow-duckdb =0.0.1, =0.5.0, =1.3.0, =1.7.1 Source cves: CVE-2026-27173 Sourc...

dag-factory (0.23.0a3), dataflow-airflow (>=2.10.5, <=2.10.10) +3 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (>=10.4.2rc1, <=10.10.0)

apache-airflow-providers-cncf-kubernetes PYPI version =10.4.2rc1, =2.10.5, =0.4.3, =0.0.1rc1, =2.10.7rc1, =2.10.11rc5 Source cves: CVE-2026-27173 Source advisory: OSV:GHSA-524W-VQ63-2XHF...

dataverk-airflow (>=1.7.4, <=1.7.17) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (8.3.3)

apache-airflow-providers-cncf-kubernetes PYPI version 8.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - dataverk-airflow =1.7.4, =1.7.17 Source cves: CVE-2026-27173 Source advisory:...

apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.0.2)

apache-airflow-providers-cncf-kubernetes PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =2.0.0 - example-pkg-naturalett 14.7.0 Source...

mojap-airflow-tools (2.0.0) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (2.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools 2.0.0 Source cves: CVE-2026-27173 Source advisory:...

mojap-airflow-tools (>=2.4.3, <=2.4.3.4) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (4.4.0)

apache-airflow-providers-cncf-kubernetes PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools =2.4.3, =2.4.3.4 Source cves: CVE-2026-27173 Source advisory...

mojap-airflow-tools (>=2.0.1, <=2.1.1) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools =2.0.1, =2.1.1 Source cves: CVE-2026-27173 Source advisory:...

dataverk-airflow (>=1.8.0, <=1.8.2), plexflow (>=0.0.168, <=0.0.180) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (8.4.2)

apache-airflow-providers-cncf-kubernetes PYPI version 8.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - dataverk-airflow =1.8.0, =0.0.168, =0.0.180 Source cves: CVE-2026-27173 Source...

example-pkg-naturalett (>=14.4.0, <=14.4.8) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (2.0.0)

apache-airflow-providers-cncf-kubernetes PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.8 Source cves: CVE-2026-27173 Source...

dag-factory (0.23.0a3), dataflow-airflow (>=2.10.5, <=2.10.10) +3 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (>=10.4.2rc1, <=10.10.0)

apache-airflow-providers-cncf-kubernetes PYPI version =10.4.2rc1, =2.10.5, =0.4.3, =0.0.1rc1, =2.10.7rc1, =2.10.11rc5 Source cves: CVE-2026-27173 Source advisory: GHSA-524W-VQ63-2XHF...

flowui-project (>=0.0.9, <=0.0.13) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (4.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - flowui-project =0.0.9, =0.0.13 Source cves: CVE-2026-27173 Source advisory:...

Cleartext Storage Of Sensitive Information

apache-airflow & apache-airflow-providers-cncf-kubernetes are vulnerable to Cleartext Storage Of Sensitive Information. The vulnerability is due to the storage of configuration files without encryption, and plaintext logging of configuration details, allowing an attacker to access the kubernetes...