apache-airflow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-56373Highapache-airflow: Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table CVE-2025-65995Mediumapache-airflow: Apache Airflow error reporting may expose full kwargs CVE-2026-22922Mediumapache-airflow: Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access CVE-2026-24098Mediumapache-airflow: Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users CVE-2025-68675Highapache-airflow: Apache Airflow proxy credentials for various providers might leak in task logs CVE-2025-68438Highapache-airflow: Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated CVE-2025-66388Mediumapache-airflow: Apache Airflow exposes secret values to authenticated UI users via rendered templates CVE-2025-62503Mediumapache-airflow: Apache Airflow's create action can upsert existing Pools/Connections/Variables CVE-2025-62402Mediumapache-airflow: Apache Airflow `/api/v2/dagReports` executes DAG Python in API CVE-2025-54941Mediumapache-airflow: Apache Airflow has a command injection vulnerability in "example_dag_decorator"CVE-2025-54831Mediumapache-airflow: Apache Airflow: Connection sensitive details exposed to users with READ permissions CVE-2024-50378Lowapache-airflow: Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data CVE-2024-45034Highapache-airflow: Apache Airflow vulnerable to Execution with Unnecessary Privileges CVE-2024-45498Highapache-airflow: Apache Airflow vulnerable to Improper Encoding or Escaping of Output CVE-2024-41937Mediumapache-airflow: Apache Airflow Cross-site Scripting Vulnerability CVE-2024-39877Highapache-airflow: Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler CVE-2024-39863Mediumapache-airflow: Apache Airflow Potential Cross-site Scripting Vulnerability CVE-2024-25142Lowapache-airflow: Apache Airflow does not return the "Cache-Control" header for dynamic content CVE-2024-32077Mediumapache-airflow: Apache Airflow: XSS vulnerability in Task Instance Log/Log Details CVE-2024-31869Mediumapache-airflow: Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used CVE-2024-29735Mediumapache-airflow: Apache Airflow Improper Preservation of Permissions vulnerability CVE-2024-28746Mediumapache-airflow: Apache Airflow: Ignored Airflow Permission CVE-2024-26280Mediumapache-airflow: Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users CVE-2024-27906Mediumapache-airflow: Apache Airflow: DAG Code and Import Error Permissions Ignored CVE-2023-50944Highapache-airflow: Apache Airflow: Bypass permission verification to read code of other dags

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo