EPSS
Percentile
50.5%
apache_airflow is vulnerable to information disclosure. The vulnerability exists in _read function of file_task_handler.py due to the use of externally controlled format string which allows an attacker to extract information from the system.
_read
file_task_handler.py
github.com/advisories/GHSA-5rp4-749p-vx26
github.com/apache/airflow/commit/18386026c28939fa6d91d198c5489c295a05dcd2
github.com/apache/airflow/pull/26337
lists.apache.org/thread/z20x8m16fnhxdkoollv53w1ybsts687t