EUVD-2026-105986

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-security-providers-google-login. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successfu...

CVE-2026-101578

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-security-providers-google-login. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successfu...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

PT-2026-119258

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-security-providers-google-login. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successfu...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-google-login component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain data without proper authorization...

Improper Neutralization of Special Elements in Data Query Logic

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via GoogleDriveHook in drive.py, where folder names, fi...

airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-81914 Source advisory:...

gps-building-blocks (1.2.2) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (1.0.0)

apache-airflow-providers-google PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - gps-building-blocks 1.2.2 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-81914 Source advisory:...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (7.0.0)

apache-airflow-providers-google PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-add-ons =0.2.9b1, =0.2.9b2 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-418...

dagtool (>=0.0.2, <=0.0.7) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.21.1)

apache-airflow-providers-google PYPI version 10.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.2, =0.0.7 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

airflow-parse-bench (>=0.0.1, <=1.0.1), airflow-toolkit (0.13.3) +2 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.26.0)

apache-airflow-providers-google PYPI version 10.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-parse-bench =0.0.1, =0.11.1, =0.1.0, =0.1.1 Source cves: CVE-2026-81914 Source advisory:...

flytekitplugins-airflow (>=1.14.4, <=1.16.31) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (12.0.0rc2)

apache-airflow-providers-google PYPI version 12.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - flytekitplugins-airflow =1.14.4, =1.16.31 Source cves: CVE-2026-81914 Source advisory:...

dagtool (>=0.0.8, <=0.0.11) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (15.1.0)

apache-airflow-providers-google PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.8, =0.0.11 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=2.1.1) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =2.1.1 Source cves: CVE-2026-81914 Source advisory:...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2), airflow-parse-bench (>=0.0.1, <=1.0.1) +12 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (>=1.0.0, <=19.0.0)

apache-airflow-providers-google PYPI version =1.0.0, =0.2.9b1, =0.0.1, =0.0.3, =0.9.0, =0.1.0, =0.0.2, =0.0.4, =14.4.4, =1.14.4, =1.0.9, =2.1.1 Source cves: CVE-2026-81914 Source advisory: MEND:CVE-2026-81914...

Insufficient Granularity of Access Control

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Insufficient Granularity of Access Control in the google Secret Manager backend process. An attacker can access other...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-68868 Source advisory:...

airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-68868 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-68868 Source advisory:...