Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow.Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backendNote: thevulnerability is about the information exposed in the logs not abo...

celery-director (>=0.5.0, <=0.8.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.16.3)

sentry-sdk PYPI version 0.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - celery-director =0.5.0, =0.8.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-sentry-sdk: python3-sentry-sdk+aiohttp-2.48.0-6.hum1 noarch python3-sentry-sdk+asyncpg-2.48.0-6.hum1 noarch python3-sentry-sdk+bottle-2.48.0-6.hum1 noarch...

CVE-2026-47161

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

CVE-2026-47161

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

CVE-2026-47161 RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

EUVD-2026-32628

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

CVE-2026-47161 RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

CVE-2026-47161

RELATE is affected by CVE-2026-47161 due to Celery workers configured to deserialize untrusted pickle data prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb. An attacker who can reach the message broker can execute arbitrary commands on the host, and due to insufficient network isolation i...

CVE-2026-47161 RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

CVE-2026-47161

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

CVE-2026-47161: Deserialization of Untrusted Data

RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary commands on the host server. Combined...

RELATE Code Issues and Vulnerabilities

RELATE is a web-based course package developed by Andreas Klöckner as an individual project. RELATE has code vulnerabilities; these vulnerabilities stem from Celery workers accepting and deserializing untrusted pickle data, which may lead to remote code execution...

PT-2026-44080

Name of the Vulnerable Software and Affected Versions RELATE versions prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb Description RELATE LMS configures its Celery workers to accept and deserialize untrusted pickle data. Pickle is a Python module used for serializing and deserializing...

apache-airflow-providers-celery (>=2.1.0rc1, <=2.1.0), celery-director (>=0.5.0, <=0.10.0) +11 more potentially affected by unknown CVE via flower (>=0.9.5, <=1.2.0)

flower PYPI version =0.9.5, =2.1.0rc1, =0.5.0, =1.8.1, =1.8.4.1, =0.1.0, =0.4.8, =0.6.0, =1.4.0, =0.1.0, =0.6.0, =0.2.1a0, =2.13.0a7 Source cves: unknown CVE Source advisory: MEND:WS-2016-0075...

WS-2016-0135

The default configuration in Celery 4.0.0 allowed for deserialization of pickled messages, even if the software is configured to send messages in the JSON format...

dagit (0.13.14rc0), dagster-airflow (0.13.14rc0) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.14rc0)

dagster PYPI version 0.13.14rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.14rc0 - dagster-airflow 0.13.14rc0 - dagster-aws 0.13.14rc0 - dagster-azure 0.13.14rc0 - dagster-celery 0.13.14rc0 -...

dagit (0.13.13rc0), dagster-airflow (0.13.13rc0) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.13rc0)

dagster PYPI version 0.13.13rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.13rc0 - dagster-airflow 0.13.13rc0 - dagster-aws 0.13.13rc0 - dagster-azure 0.13.13rc0 - dagster-celery 0.13.13rc0 -...

dagit (0.13.12), dagster-airflow (0.13.12) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.12)

dagster PYPI version 0.13.12 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.12 - dagster-airflow 0.13.12 - dagster-aws 0.13.12 - dagster-azure 0.13.12 - dagster-celery 0.13.12 - dagster-celery-docker 0.13.12 -...

dagit (0.13.12rc2), dagster-airflow (0.13.12rc2) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.12rc2)

dagster PYPI version 0.13.12rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.12rc2 - dagster-airflow 0.13.12rc2 - dagster-aws 0.13.12rc2 - dagster-azure 0.13.12rc2 - dagster-celery 0.13.12rc2 -...