Filter
AND
-Infinity
0

Apache AirflowApache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

First published (updated )

pip/apache-airflowApache Airflow: Stored XSS Vulnerability on provider link

First published (updated )

pip/apache-airflowApache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

First published (updated )

pip/apache-airflow-providers-fabApache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow

First published (updated )

pip/apache-airflowApache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Flask-AppBuilderObservable Response Discrepancy in Flask-AppBuilder

First published (updated )

Apache AirflowApache Airflow's Experimental API Authentication Bypass

First published (updated )

Apache AirflowApache Airflow Command Injection

First published (updated )

Apache AirflowApache Airflow: Potential pickle deserialization vulnerability in XComs

7.5
First published (updated )

Apache AirflowApache Airflow: Bypass permission verification to read code of other dags

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/apache-airflowApache Airflow: DAG Params alllow to embed unchecked Javascript

First published (updated )

Apache AirflowApache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)

First published (updated )

pip/apache-airflowApache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

7.5
First published (updated )

pip/apache-airflowApache Airflow: Bypass permission verification to view task instances of other dags

First published (updated )

Apache AirflowApache Airflow Dag Runs Broken Access Control Vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache AirflowApache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature

8.1
First published (updated )

Apache AirflowApache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges

8.8
First published (updated )

Apache AirflowApache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set

First published (updated )

Apache AirflowApache Airflow: Configuration information leakage vulnerability

First published (updated )

Apache AirflowApache Airflow: Improper access control to DAG resources

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache AirflowApache Airflow: Privilege escalation using airflow logs

First published (updated )

Apache AirflowInformation disclosure in Apache Airflow

First published (updated )

pip/apache-airflowApache Airflow: Potential XSS Vulnerability

8.1
First published (updated )

pip/apache-airflowApache Airflow: DAG Author Code Execution possibility in airflow-scheduler

8.8
First published (updated )

pip/apache-airflowApache Airflow: Improper access control vulnerability on the "varimport" endpoint

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/apache-airflowApache Airflow: Missing CSRF protection on DAG/trigger

First published (updated )

pip/apache-airflowApache Airflow: Improper access control to DAG resources

First published (updated )

Apache AirflowSession fixation in Apache Airflow web interface

First published (updated )

Apache AirflowApache Airflow: Open redirect during login

First published (updated )

Apache AirflowApache Airflow prior to 2.4.2 has an open redirect

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203