PT-2026-25887

Name of the Vulnerable Software and Affected Versions Apache Airflow versions 3.1.0 through 3.1.7 Description The session token token in cookies for Apache Airflow is set to path=/ regardless of the configured base url for the webserver or api. This allows any application co-hosted under the same...