CVE-2022-40604

Critical 7.5

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

Published September 21, 2022.