PYSEC-2026-2361 Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/exposestacktraces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue...

Mozilla Firefox Add-on SDK Cross-Site Scripting Vulnerability

Mozilla Firefox is an open source web browser. A cross-site scripting vulnerability exists in the Mozilla Firefox Add-on SDK due to a failure of the program to properly handle the 'script: false' panel setting, which allows remote attackers to conduct cross-site scripting attacks using inline...