airflow-add-ons (>=0.2.4 <=0.2.9b2), airflow-poetry-test (>=0.1.0 <=0.1.2) +5 more potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (>=1.4.0 <=5.1.0)

apache-airflow-providers-amazon PYPI version =1.4.0, =0.2.4, =0.1.0, =0.1.0, =0.0.4, =0.0.0, =14.4.0, =0.0.1, =0.0.13 Source cves: CVE-2023-25956 Source advisory: OSV:GHSA-W695-P3J5-HRJ9...

CVE-2023-25956

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

CVE-2023-25956

The CVE-2023-25956 issue is a vulnerability in the Apache Airflow AWS Provider (pre-7.2.1) described as a generation of an error message that contains sensitive information, leading to information disclosure. Multiple connected sources corroborate affected versions (