2722 matches found
CVE-2025-27555 Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli
Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were...
Apache Airflow 日志信息泄露漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform with the creation, management and monitoring of workflow functions. The platform is scalable and dynamic monitoring and other features. Apache Airflow has a log information disclosure vulnerability. An...
CVE-2025-27555: Insertion of Sensitive Information into Log File
Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were...
PT-2026-21670
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.11.1 Description A user with DAG author permissions can manipulate the Airflow database to execute arbitrary code within the web server context. This could lead to remote code execution on the server-side whe...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. Versions of Apache Airflow prior to 2.11.1 contained security vulnerabilities. These vulnerabilities stemmed from the ability of...
CVE-2025-65995: Generation of Error Message Containing Sensitive Information
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Versions of Apache Airflow prior to 3.1.4 and 2.11.1...
ROOT-APP-PYPI-CVE-2024-45034 CVE-2024-45034 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2024-45034 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-46215 CVE-2023-46215 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-46215 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-40127 CVE-2022-40127 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-40127 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-36543 CVE-2023-36543 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-36543 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-38170 CVE-2022-38170 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-38170 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-40611 CVE-2023-40611 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-40611 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-37379 CVE-2023-37379 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-37379 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-25754 CVE-2023-25754 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-25754 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-50944 CVE-2023-50944 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2023-50944 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-46651 CVE-2022-46651 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-46651 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-38054 CVE-2022-38054 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-38054 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...