CVE-2026-42526

In the AWS Secrets Manager and SSM Parameter Store secrets backends of "apache-airflow-providers-amazon" prior to 9.28.0, the team-scoping logic could resolve a "connid" containing a "/" e.g. ""myteam/conn"" to the same path as another team's team-scoped secret when the caller had no team context...