Lucene search

K

Airflow Celery Provider Security Vulnerabilities - CVSS Score 9 - 10

cve
cve

CVE-2023-25691

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

9.8CVSS

9.3AI Score

0.002EPSS

2023-02-24 12:15 PM
39
cve
cve

CVE-2024-25141

When ssl was enabled for Mongo Hook, default settings included "allow_insecure" which caused that certificates were not validated. This was unexpected and undocumented.Users are recommended to upgrade to version 4.0.0, which fixes this issue.

9.1CVSS

6.6AI Score

0.0004EPSS

2024-02-20 09:15 PM
4213