CVE-2025-27018

The Apache Airflow MySQL Provider is vulnerable to an SQL Injection vulnerability (CWE-89 ) in versions before 6.2.0 . The flaw occurs when users trigger a DAG containing dump_sql or load_sql functions and provide a table parameter via the UI; this allows for the execution of unintended SQL comma...

CVE-2023-22884

CVE-2023-22884 affects Apache Airflow (core) and the Apache Airflow MySQL Provider, with the vulnerability stemming from improper neutralization of input in the LOAD DATA LOCAL INFILE flow, enabling Command Injection. Reported affected versions: Airflow before 2.5.1 and MySQL Provider before 4.0....