Improper Neutralization of Special Elements in Data Query Logic

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via GoogleDriveHook in drive.py, where folder names, fi...

airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=1.1.3) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =1.1.3 Source cves: CVE-2026-81914 Source advisory:...

airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-81914 Source advisory:...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (7.0.0)

apache-airflow-providers-google PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-add-ons =0.2.9b1, =0.2.9b2 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-418...

airflow-parse-bench (>=0.0.1, <=1.0.1), airflow-toolkit (0.13.3) +2 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.26.0)

apache-airflow-providers-google PYPI version 10.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-parse-bench =0.0.1, =0.11.1, =0.1.0, =0.1.1 Source cves: CVE-2026-81914 Source advisory:...

dagtool (>=0.0.8, <=0.0.11) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (15.1.0)

apache-airflow-providers-google PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.8, =0.0.11 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

gps-building-blocks (1.2.2) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (1.0.0)

apache-airflow-providers-google PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - gps-building-blocks 1.2.2 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

flytekitplugins-airflow (>=1.14.4, <=1.16.31) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (12.0.0rc2)

apache-airflow-providers-google PYPI version 12.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - flytekitplugins-airflow =1.14.4, =1.16.31 Source cves: CVE-2026-81914 Source advisory:...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-81914 Source advisory:...

dagtool (>=0.0.2, <=0.0.7) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.21.1)

apache-airflow-providers-google PYPI version 10.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.2, =0.0.7 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2), airflow-parse-bench (>=0.0.1, <=1.0.1) +12 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (>=1.0.0, <=19.0.0)

apache-airflow-providers-google PYPI version =1.0.0, =0.2.9b1, =0.0.1, =0.0.3, =0.9.0, =0.1.0, =0.0.2, =0.0.4, =14.4.4, =1.14.4, =1.0.9, =1.1.3 Source cves: CVE-2026-81914 Source advisory: MEND:CVE-2026-81914...

Insufficient Granularity of Access Control

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Insufficient Granularity of Access Control in the google Secret Manager backend process. An attacker can access other...

flytekitplugins-airflow (>=1.14.4, <=1.16.31) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (12.0.0rc2)

apache-airflow-providers-google PYPI version 12.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - flytekitplugins-airflow =1.14.4, =1.16.31 Source cves: CVE-2026-68868 Source advisory:...

airflow-parse-bench (>=0.0.1, <=1.0.1), airflow-toolkit (0.13.3) +2 more potentially affected by CVE-2026-68868 via apache-airflow-providers-google (10.26.0)

apache-airflow-providers-google PYPI version 10.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-parse-bench =0.0.1, =0.11.1, =0.1.0, =0.1.1 Source cves: CVE-2026-68868 Source advisory:...

airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=1.1.3) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =1.1.3 Source cves: CVE-2026-68868 Source advisory:...

dagtool (>=0.0.2, <=0.0.7) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (10.21.1)

apache-airflow-providers-google PYPI version 10.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.2, =0.0.7 Source cves: CVE-2026-68868 Source advisory: OSV:PYSEC-2026-3714...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-68868 Source advisory:...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (7.0.0)

apache-airflow-providers-google PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-add-ons =0.2.9b1, =0.2.9b2 Source cves: CVE-2026-68868 Source advisory: OSV:PYSEC-2026-371...

airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-68868 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-68868 Source advisory:...