CVE-2024-25141

The apache_airflow_providers_mongo component in Apache Airflow is vulnerable to a trust management issue due to improper certificate validation . When SSL is enabled for the Mongo Hook , the default settings unexpectedly and undocumentedly include the allow_insecure option, which prevents certifi...