acryl-datahub-airflow-plugin (>=0.8.44.4 <=0.9.2.1rc2), airflow-add-ons (>=0.2.9b1 <=0.2.9b2) +11 more potentially affected by CVE-2022-38054 via apache-airflow (>=2.2.5 <=2.3.4)

apache-airflow PYPI version =2.2.5, =0.8.44.4, =0.2.9b1, =0.8.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.1.0, =0.4.0, =0.8.3, =0.2.35, =0.1.0, =0.10.0.1 Source cves: CVE-2022-38054 Source advisory: OSV:GHSA-5FF8-7639-6V6G...

CVE-2022-38054

In Apache Airflow versions 2.2.4 through 2.3.3, the database webserver session backend was susceptible to session fixation...

CVE-2022-38054 Session Fixation

In Apache Airflow versions 2.2.4 through 2.3.3, the database webserver session backend was susceptible to session fixation...