2109099 matches found
ECHO-CB4A-4DB7-9170
Bulletin has no description...
BIT-AIRFLOW-2026-86473 Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry
Apache Airflow: the Core API logout endpoint revokes only a session token presented as the token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, the endpoint returns its normal logout response but revokes nothing, so the token remains valid unti...
BIT-AIRFLOW-2026-82355 Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation
When a request to the Airflow core API carries both a session cookie and an explicit Authorization: Bearer token, Airflow resolves the caller from the cookie and ignores the bearer token, inverting the intended precedence of bearer over cookie. The request then executes -- and is recorded in the...
BIT-AIRFLOW-2026-75158 Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter
Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID,...
ECHO-3FFF-6D78-3CEC
Bulletin has no description...
ECHO-7B6E-F313-9DC9
Bulletin has no description...
ECHO-9923-E474-207E
Bulletin has no description...
BELL-CVE-2026-97518
Bulletin has no description...
BELL-CVE-2026-97520
Bulletin has no description...
BELL-CVE-2026-97521
Bulletin has no description...
BELL-CVE-2026-97519
Bulletin has no description...
BELL-CVE-2026-97508
Bulletin has no description...
BELL-CVE-2026-97510
Bulletin has no description...
BELL-CVE-2026-97503
Bulletin has no description...
BELL-CVE-2026-97504
Bulletin has no description...
BELL-CVE-2026-97502
Bulletin has no description...
BELL-CVE-2026-97511
Bulletin has no description...
BELL-CVE-2026-97512
Bulletin has no description...
BELL-CVE-2026-97513
Bulletin has no description...
BELL-CVE-2026-97515
Bulletin has no description...
BELL-CVE-2026-97509
Bulletin has no description...
BELL-CVE-2026-97514
Bulletin has no description...
BELL-CVE-2026-97516
Bulletin has no description...
BELL-CVE-2026-97507
Bulletin has no description...
BELL-CVE-2026-97517
Bulletin has no description...
BELL-CVE-2026-97505
Bulletin has no description...
BELL-CVE-2026-97506
Bulletin has no description...
BELL-CVE-2026-97497
Bulletin has no description...
BELL-CVE-2026-97487
Bulletin has no description...
BELL-CVE-2026-97496
Bulletin has no description...
BELL-CVE-2026-97491
Bulletin has no description...
BELL-CVE-2026-97499
Bulletin has no description...
BELL-CVE-2026-97498
Bulletin has no description...
BELL-CVE-2026-97486
Bulletin has no description...
BELL-CVE-2026-97493
Bulletin has no description...
BELL-CVE-2026-97500
Bulletin has no description...
BELL-CVE-2026-97501
Bulletin has no description...
BELL-CVE-2026-97488
Bulletin has no description...
BELL-CVE-2026-97489
Bulletin has no description...
BELL-CVE-2026-97494
Bulletin has no description...
BELL-CVE-2026-97495
Bulletin has no description...
BELL-CVE-2026-97490
Bulletin has no description...
BELL-CVE-2026-97492
Bulletin has no description...
BELL-CVE-2026-97474
Bulletin has no description...
BELL-CVE-2026-97485
Bulletin has no description...
BELL-CVE-2026-97456
Bulletin has no description...
BELL-CVE-2026-97472
Bulletin has no description...
BELL-CVE-2026-97479
Bulletin has no description...