Filter
AND
pip/apache-airflowApache Airflow: DAG Author Code Execution possibility in airflow-scheduler
8.8
First published (updated )
pip/apache-airflowApache Airflow: Potential XSS Vulnerability
8.1
First published (updated )
pip/apache-airflowApache Airflow: Ignored Airflow Permissions
8.1
EPSS
0.04%
First published (updated )
Apache AirflowApache Airflow: Potential pickle deserialization vulnerability in XComs
7.5
First published (updated )
pip/apache-airflowApache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache AirflowApache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature
8.1
First published (updated )
Apache AirflowSession fixation in Apache Airflow web interface
8
First published (updated )
Apache AirflowApache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges
8.8
First published (updated )
Apache AirflowApache Airflow path traversal by authenticated user
7
First published (updated )
Apache AirflowApache Airflow Hive Provider vulnerability (command injection via hive_cli connection)
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache AirflowApache Airflow prior to 2.3.1 may include sensitive values in rendered template
7.5
First published (updated )
pip/apache-airflowApache Airflow <2.4.0 has an RCE in a bash example
8.8
First published (updated )
Apache AirflowSession still functional after user is deactivated
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache AirflowIncorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default conf…
7.7
First published (updated )
Apache AirflowApache Airflow Command Injection
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache AirflowThe LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was m…
7.5
First published (updated )