CVE-2026-111395

In Apache Airflow , a vulnerability exists where the system fails to reject reserved serialization keys within a Dag run's conf. An attacker with permission to trigger a Dag using a deadline alert and an asynchronous callback can provide a malicious conf. If the deadline is missed, this payload c...

PT-2020-21832

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash involves the functions r bin object rebuild classes ht, r bin object set items, and r bin...