abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +138 more potentially affected by CVE-2023-42781 via apache-airflow (>=1.8.2 <=2.7.2)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.9b1, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend =0.1.0 and more Source cves: CVE-2023-42781 Source advisory: OSV:GHSA-R7X6-XFCM-3MXV...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +138 more potentially affected by CVE-2023-42781 via apache-airflow (>=1.8.2 <=2.7.2)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.9b1, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend =0.1.0 and more Source cves: CVE-2023-42781 Source advisory: OSV:PYSEC-2023-231...

CVE-2023-42781

CVE-2023-42781 affects Apache Airflow up to versions before 2.7.3 . The issue allows an authorized user (with access to read specific DAGs) to view information about task instances in other DAGs . This is a cross-DAG information disclosure vulnerability rather than a code execution flaw. Mitigati...