Lucene search
+L

3 matches found

OSV
OSV
added 2026/06/05 5:40 a.m.15 views

BIT-AIRFLOW-2026-42252 Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern

Apache Airflow's official documentation at core-concepts/dag-run.html "Passing Parameters when triggering Dags" showed a verbatim BashOperatorbashcommand="echo value: dagrun.conf'conf1' " example without any quoting / sanitization warning. Dag authors who copied the pattern verbatim into...

9.1CVSS5.6AI score0.00383EPSS
SaveExploits0References3
Rows per page
Query Builder