2 matches found
PYSEC-2026-2086
A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...
4.3CVSS6.1AI score0.00671EPSS
SaveExploits0References4Affected Software1
EUVD-2026-42025
A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...
4.3CVSS6AI score0.00671EPSS
SaveExploits0References3
20