apache-airflow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-25142Lowapache-airflow: Apache Airflow does not return the "Cache-Control" header for dynamic content CVE-2024-32077Mediumapache-airflow: Apache Airflow: XSS vulnerability in Task Instance Log/Log Details CVE-2024-31869Mediumapache-airflow: Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used CVE-2024-29735Mediumapache-airflow: Apache Airflow Improper Preservation of Permissions vulnerability CVE-2024-28746Mediumapache-airflow: Apache Airflow: Ignored Airflow Permission CVE-2024-26280Mediumapache-airflow: Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users CVE-2024-27906Mediumapache-airflow: Apache Airflow: DAG Code and Import Error Permissions Ignored CVE-2023-50944Highapache-airflow: Apache Airflow: Bypass permission verification to read code of other dags CVE-2023-51702Mediumapache-airflow: Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged…CVE-2023-50943Highapache-airflow: Apache Airflow: pickle deserialization vulnerability in XComs CVE-2023-49920Mediumapache-airflow: Apache Airflow Cross-Site Request Forgery vulnerability CVE-2023-50783Mediumapache-airflow: Apache Airflow Improper Access Control vulnerability CVE-2023-48291Mediumapache-airflow: Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere CVE-2023-47265Mediumapache-airflow: Apache Airflow has a stored cross-site scripting vulnerability CVE-2023-42781Highapache-airflow: Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor CVE-2023-47037Mediumapache-airflow: Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes CVE-2023-46215Highapache-airflow-providers-celery: Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability CVE-2023-46288Mediumapache-airflow: Apache Airflow vulnerable to Exposure of Sensitive Information CVE-2023-45348Mediumapache-airflow: Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only CVE-2023-42792Mediumapache-airflow: Apache Airflow vulnerable to privilege escalation CVE-2023-42780Mediumapache-airflow: Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs CVE-2023-42663Mediumapache-airflow: Apache Airflow vulnerable to sensitive information exposure CVE-2023-40712Highapache-airflow: Apache Airflow information exposure vulnerability CVE-2023-40611Mediumapache-airflow: Apache Airflow Incorrect Authorization vulnerability CVE-2023-40273Highapache-airflow: Apache Airflow Session Fixation vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo