dataflow-airflow (2.10.3) potentially affected by CVE-2026-42360 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-42360 Source advisory: OSV:GHSA-CG3X-89RC-X9MW...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-42358 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-42358 Source advisory: OSV:GHSA-33G2-GX67-C2H3...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-40861 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-40861 Source advisory: OSV:GHSA-89CJ-XRPX-J79M...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-45192 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-45192 Source advisory: OSV:GHSA-2883-WWH7-X57V...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-48726 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-48726 Source advisory: OSV:PYSEC-2026-187...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-45360 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-45360 Source advisory: OSV:PYSEC-2026-186...

dataflow-airflow (2.10.3) potentially affected by CVE-2025-68438 +1 more via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2025-68438, CVE-2026-42360 Source advisory: OSV:PYSEC-2026-172...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-40861 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-40861 Source advisory: OSV:PYSEC-2026-181...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-45192 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-45192 Source advisory: OSV:PYSEC-2026-173...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-45361 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-45361 Source advisory: OSV:GHSA-G9V5-GJWF-9RWX...

dataflow-421 (>=0.1.8, <=0.2.12), easyroutine (>=1.1.1, <=1.1.5) +2 more potentially affected by CVE-2026-4372 via transformers (4.51.1)

transformers PYPI version 4.51.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dataflow-421 =0.1.8, =1.1.1, =1.0.10, =1.18.0, =1.27.0 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-45361 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-45361 Source advisory: OSV:PYSEC-2026-166...

dataflow-421 (>=0.1.8, <=0.2.12), easyroutine (>=1.1.1, <=1.1.5) +2 more potentially affected by CVE-2026-4372 via transformers (4.51.1)

transformers PYPI version 4.51.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dataflow-421 =0.1.8, =1.1.1, =1.0.10, =1.18.0, =1.27.0 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

CVE-2026-42458

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

EUVD-2026-30575

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458 Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458 Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458

CVE-2026-42458 (Magento LTS/OpenMage Magento-LTS) : A reflected XSS in the admin-import/export Dataflow - Profiles feature allows injection via the filename parameter in the Dataflow Import path. Affected: OpenMage/magento-lts (unofficial Magento LTS) prior to version 20.18.0. Evidence across sou...