PYSEC-2026-3988

Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID,...

PYSEC-2026-3988

Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID,...

Malicious code in deere-ui-asset-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a563ad47a84cb8f9c351c8bde117be9510577e07fdf298faf25187c2b0a7883c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2401 Malicious code in deere-ui-asset-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a563ad47a84cb8f9c351c8bde117be9510577e07fdf298faf25187c2b0a7883c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...