117885 matches found
PYSEC-0000-CVE-2026-49296
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...
CVE-2025-68064
creationtimestamp| type| source ---|---|--- 2026-07-07 10:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2eqxrjpq2h...
CVE-2021-20159
creationtimestamp| type| source ---|---|--- 2026-07-07 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq2cl6uq6a2b...
CVE-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...
CVE-2025-68075
creationtimestamp| type| source ---|---|--- 2026-07-07 09:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2bfo4jtg2n...
CVE-2026-57868
creationtimestamp| type| source ---|---|--- 2026-07-07 08:39:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq27ddn7ny2u...
CVE-2026-57869
creationtimestamp| type| source ---|---|--- 2026-07-07 08:34:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq272f5jnd2y...
CVE-2026-8309
creationtimestamp| type| source ---|---|--- 2026-07-07 08:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq26ii7rnj2b...
CVE-2026-7380
creationtimestamp| type| source ---|---|--- 2026-07-07 08:09:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25ovshbb23...
CVE-2026-57870
creationtimestamp| type| source ---|---|--- 2026-07-07 08:05:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25i6svjz2b...
CVE-2026-57871
creationtimestamp| type| source ---|---|--- 2026-07-07 08:02:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25c7qnkf2a...
CVE-2026-5730
creationtimestamp| type| source ---|---|--- 2026-07-07 07:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq254tqfsn2a...
CVE-2026-5799
creationtimestamp| type| source ---|---|--- 2026-07-07 07:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq24xxd3v22a...
CVE-2026-57867
creationtimestamp| type| source ---|---|--- 2026-07-07 07:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23cby4z22b...
MAL-2026-6910 Malicious code in zluri-ad-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a807f066f0255f7480ebd7d445043282260b464b0ef54a32a2d022c93bbf7 The package declares a preinstall hook node index.js that runs automatically on npm install. index.js requires os, dns, https, querystring, and the...
CVE-2026-42145
creationtimestamp| type| source ---|---|--- 2026-07-07 04:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsd4btb62y...
CVE-2026-34170
creationtimestamp| type| source ---|---|--- 2026-07-07 04:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzs25sv6m23...
CVE-2026-34149
creationtimestamp| type| source ---|---|--- 2026-07-07 04:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzrr7czc623...
CVE-2026-11405
creationtimestamp| type| source ---|---|--- 2026-07-07 04:31:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpzrjkh5ga2f 2026-07-07 04:31:59+00:00| seen| https://bsky.app/profile/potato.software/post/3mpzrjlnff724 2026-07-07 08:15:44+00:00| seen|...