airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67260 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67260 Source advisory: OSV:GHSA-Q4C3-7575-55J2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: OSV:GHSA-2QJV-P2GC-MJG2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67260 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67260 Source advisory: GHSA-Q4C3-7575-55J2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-65017 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-65017 Source advisory: GHSA-C56V-8W4G-3MFM...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: GHSA-2QJV-P2GC-MJG2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: GHSA-8PRW-8M6X-8W6F...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-65017 via apache-airflow-core (>=3.3.0, <=3.3.1rc2)

apache-airflow-core PYPI version =3.3.0, =0.5.0, =3.3.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-65017 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-18748191...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow-task-sdk (>=1.3.0, <=1.3.1rc2)

apache-airflow-task-sdk PYPI version =1.3.0, =0.5.0, =3.3.0, =3.3.1rc2 - apache-airflow-core 3.3.0 Source cves: CVE-2026-67587 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-18748192...

Deserialization of Untrusted Data

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization of the Callback object, which reconstructs the...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +45 more potentially affected by CVE-2026-68970 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.3.1rc2)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.0.0rc3, =3.3.0 - apache-airflow-providers-box 2.0.6 and more Source cves: CVE-2026-68970 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-18748200...

Cleartext Storage of Sensitive Information

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the Variable deserialization. An attacker can access sensiti...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +45 more potentially affected by CVE-2026-59244 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.3.1rc2)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.0.0rc3, =3.3.0 - apache-airflow-providers-box 2.0.6 and more Source cves: CVE-2026-59244 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-18748199...

Cleartext Storage of Sensitive Information

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the Rendered Templates UI when the var.json fails to mask...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: OSV:PYSEC-2026-3708...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67260 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67260 Source advisory: OSV:PYSEC-2026-3707...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: OSV:PYSEC-2026-3991...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: MEND:CVE-2026-67587...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-65017 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-65017 Source advisory: MEND:CVE-2026-65017...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +38 more potentially affected by CVE-2026-42360 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.2.1)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.6.2 and more Source cves: CVE-2026-42360 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-17131176...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +38 more potentially affected by CVE-2026-45192 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.2.1)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.6.2 and more Source cves: CVE-2026-45192 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-17132596...