Lucene search
+L

94 matches found

PyPA
PyPA
•added 2026/07/07 11:45 a.m.•28 views

Apache Airflow Apache Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider.Patching on top of CVE-2023-35797Before6.1.2the proxyuser option can also inject semicolon.This issue affects Apache Airflow Apache Hive Provider: before 6.1.2.It is recommended updating...

8.8CVSS7.7AI score0.01586EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/07 11:45 a.m.•19 views

PYSEC-2026-1139 Apache Airflow Apache Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 Before 6.1.2 the proxyuser option can also inject semicolon. This issue affects Apache Airflow Apache Hive Provider: before 6.1.2. It is recommended updatin...

8.8CVSS7.7AI score0.01586EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/07/07 10:17 a.m.•21 views

OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS7.4AI score0.01748EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/07 10:17 a.m.•20 views

PYSEC-2026-772 OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS7.4AI score0.01748EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•17 views

Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.Before version 6.1.1 it waspossible to bypass the security check to RCE viaprincipal parameter. For this to beexploited it requir...

9.8CVSS8AI score0.02791EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•29 views

PYSEC-2026-273 Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it...

9.8CVSS8AI score0.02791EPSS
SaveExploits0References8
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•20 views

Apache Airflow Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS8AI score0.01982EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•17 views

Apache Airflow Hive Provider vulnerable to code injection

Apache Software Foundation's Apache Airflow Hive Provider before 6.0.0 is vulnerable to improper control of generation of code...

9.8CVSS8.1AI score0.02765EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•25 views

PYSEC-2026-272 Apache Airflow Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS7.9AI score0.01982EPSS
SaveExploits0References6
OSV
OSV
•added 2026/06/29 11:50 a.m.•22 views

PYSEC-2026-271 Apache Airflow Hive Provider vulnerable to code injection

Apache Software Foundation's Apache Airflow Hive Provider before 6.0.0 is vulnerable to improper control of generation of code...

9.8CVSS8.1AI score0.02765EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•16 views

Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS8.1AI score0.03308EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•20 views

PYSEC-2026-274 Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS8.1AI score0.03308EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•24 views

PT-2026-53369

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS8AI score0.01982EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•15 views

PT-2026-53370

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it...

9.8CVSS8AI score0.02791EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•17 views

PT-2026-53371

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS8.1AI score0.03308EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/01/09 12:41 p.m.•16 views

CVE-2023-25696

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS8.1AI score0.01982EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2022-7732

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.03308EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-1955

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.01586EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-7313

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.01748EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2023-0680

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.01982EPSS
SaveExploits0References4
Rows per page
Query Builder