Sign in

Not rated

CVE-2023-25691 Improper Input Validation vulnerability in the Apache Airflow Google Provider

Description

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

Affected products and versions

Product	Affected versions	Fixed in
Apache Airflow Google Provider 8.10	earliest → < 8.10.0	8.10.0

The 6 CVEs of Apache Airflow Google Provider →

CVE-2026-81914 Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly… Not rated CVE-2026-68868 The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when… Not rated CVE-2026-49297 Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS… Not rated CVE-2026-45361 Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH… Not rated

Do you use Apache Airflow Google Provider?

Track this CVE Watch Apache Airflow Google Provider Check my SBOMs

www.cveye.io/en/cve/CVE-2023-25691

Timeline

Published February 24, 2023
Last modified March 11, 2025

References

github.com github.com
lists.apache.org lists.apache.org

Track this CVE