Insertion of Sensitive Information into Log File

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the proxies and proxy fields in a Connection. An...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the serialization for rendered...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plugin (1.5.0) +28 more potentially affected by CVE-2025-68675 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.1.5)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =0.6.1, =1.10.7, =0.1.0, =1.4.3, =1.2.10, =3.0.0rc3, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.25.0rc1, =3.12.0rc1, =3.12.0 and more Source cves: CVE-2025-68675 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-15032621...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plugin (1.5.0) +20 more potentially affected by CVE-2025-66388 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.1.3)

apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =0.6.1, =1.10.7, =0.1.0, =1.4.3, =1.2.10, =3.0.0rc3, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.25.0rc1, =3.12.0rc1, =3.12.0 and more Source cves: CVE-2025-66388 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-14459396...

apache-airflow (>=3.1.0, <=3.1.4rc2), apache-airflow-core (>=3.1.0, <=3.1.4rc2) +6 more potentially affected by CVE-2025-66388 via apache-airflow-task-sdk (>=1.1.0, <=1.1.4rc2)

apache-airflow-task-sdk PYPI version =1.1.0, =3.1.0, =3.1.0, =1.6.0, =1.5.3, =1.26.0, =2.0.2, =0.4.0, =1.8.0 Source cves: CVE-2025-66388 Source advisory: MEND:CVE-2025-66388...