PYSEC-2026-2083

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

PYSEC-0000-CVE-2026-49296

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

EUVD-2026-42027

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-49296

CVE-2026-49296 (Apache Airflow) : Affected versions before 3.3.0 expose the full source of co-located DAGs when reading a single DAG via GET /api/v2/dagSources/{dag_id} or the UI view, bypassing per-DAG read controls. This can disclose multiple DAG sources from the same file to authorized readers...

CVE-2026-55379

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical...

CVE-2026-4375

creationtimestamp| type| source ---|---|--- 2026-07-07 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116877520158002101 2026-07-07 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq23iqtn2r2u 2026-07-07 14:12:06+00:00| seen|...

CVE-2026-34037

creationtimestamp| type| source ---|---|--- 2026-07-07 04:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpzpxpr5wr2h 2026-07-07 04:21:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqxmsj2d2u 2026-07-07 04:30:26+00:00| seen|...

CVE-2026-14604

A flaw was found in Open Asset Import Library Assimp. This vulnerability, a double free, exists within the PLY Model Handler component. A remote attacker could exploit this flaw by manipulating PLY model files, leading to a denial of service and making the application unavailable. Mitigation To...

PT-2026-56179

Name of the Vulnerable Software and Affected Versions apache-airflow versions prior to 3.3.0 Description An authorization bypass occurs when a user with permission to read a specific Dag can disclose the source code of other Dags located within the same source file. This issue affects deployments...

PT-2026-56272

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.650 Description Code injection is possible via a caller-influenced Profile attribute. When a string is assigned to this attribute, the software splits it into path, package, and arguments, then interpolates the package...

Data Import for Veeam Data Cloud for Salesforce

Purpose This article explains the Data Import feature in Veeam Data Cloud for Salesforce VDCSF: what it does, which sources it currently supports, and how to prepare data for importation. This article is a feature summary only. Full procedural documentation can be found in the VDCSF User Guide...

CVE-2026-35381

creationtimestamp| type| source ---|---|--- 2026-07-06 22:41:49+00:00| seen| https://gist.github.com/alon710/b10b20af35b7bf752b36e152bb72f112 2026-07-06 22:51:38+00:00| seen| https://gist.github.com/alon710/61c7500d7ede6fc47b0cecdd16d710a9 2026-07-07 00:00:03+00:00| seen|...

CVE-2026-24014

creationtimestamp| type| source ---|---|--- 2026-07-06 19:23:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpysv577xg2h 2026-07-06 20:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywlvq6ic2e 2026-07-08 04:07:07+00:00| seen|...

CVE-2026-48614

creationtimestamp| type| source ---|---|--- 2026-07-06 18:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpypo6pjat2j 2026-07-06 21:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzse3xqg2q 2026-07-07 17:10:01+00:00| seen|...

CVE-2026-40139

creationtimestamp| type| source ---|---|--- 2026-07-06 17:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpymetigjj26 2026-07-06 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpymjzwroy2i 2026-07-06 17:48:42+00:00| seen|...

CVE-2026-52889

creationtimestamp| type| source ---|---|--- 2026-07-06 17:19:00+00:00| seen| https://bsky.app/profile/suriq.io/post/3mpylw6zxqa23 2026-07-06 17:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpymggmgx42r 2026-08-19 16:10:54+00:00| seen|...

CVE-2025-53830

creationtimestamp| type| source ---|---|--- 2026-07-06 16:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyhjmgtvk2d 2026-07-06 16:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyity4fct2z...