CVE-2025-69219

Apache Airflow providers (specifically apache-airflow-providers-http) are vulnerable to Remote Code Execution (RCE) due to unsafe pickle deserialization in the HttpOperator.execute_complete() function. The vulnerability occurs because the software uses Python's pickle module to deserialize HTTP t...