CVE-2025-27018

The Apache Airflow MySQL Provider (versions before 6.2.0 ) is vulnerable to an SQL Injection flaw. When a user triggers a DAG using the dump_sql or load_sql functions, they can pass a table parameter via the UI that fails to properly neutralize special elements. This allows an attacker to execute...

CVE-2023-22884

CVE-2023-22884 affects Apache Airflow (core) and the Apache Airflow MySQL Provider, with the vulnerability stemming from improper neutralization of input in the LOAD DATA LOCAL INFILE flow, enabling Command Injection. Reported affected versions: Airflow before 2.5.1 and MySQL Provider before 4.0....