Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/07 12:31 p.m.•7 views

Apache Airflow exposes unreadable DAG identifiers in the scheduling dependencies graph

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

4.3CVSS5.7AI score0.00636EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder