| CVE-2024-39877 |
Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
|
Not rated
|
Jul 17, 2024 |
| CVE-2024-39863 |
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious…
|
Not rated
|
Jul 17, 2024 |
| CVE-2024-25142 |
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return…
|
Not rated
|
Jun 14, 2024 |
| CVE-2024-32077 |
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the…
|
Not rated
|
May 14, 2024 |
| CVE-2024-31869 |
Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider…
|
Not rated
|
Apr 18, 2024 |
| CVE-2024-29735 |
Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2…
|
Not rated
|
Mar 26, 2024 |
| CVE-2024-28746 |
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited…
|
Not rated
|
Mar 14, 2024 |
| CVE-2024-26280 |
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all…
|
Not rated
|
Mar 1, 2024 |
| CVE-2024-27906 |
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import…
|
Not rated
|
Feb 29, 2024 |
| CVE-2023-50944 |
Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source…
|
Not rated
|
Jan 24, 2024 |
| CVE-2023-50943 |
Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data…
|
Not rated
|
Jan 24, 2024 |
| CVE-2023-51702 |
Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the…
|
Not rated
|
Jan 24, 2024 |
| CVE-2023-48291 |
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with…
|
Not rated
|
Dec 21, 2023 |
| CVE-2023-50783 |
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the…
|
Not rated
|
Dec 21, 2023 |
| CVE-2023-47265 |
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded…
|
Not rated
|
Dec 21, 2023 |
| CVE-2023-49920 |
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET…
|
Not rated
|
Dec 21, 2023 |
| CVE-2023-42781 |
Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read…
|
Not rated
|
Nov 12, 2023 |
| CVE-2023-47037 |
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions…
|
Not rated
|
Nov 12, 2023 |
| CVE-2023-46215 |
Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow
|
Not rated
|
Oct 28, 2023 |
| CVE-2023-46288 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache…
|
Not rated
|
Oct 23, 2023 |
| CVE-2023-42663 |
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read…
|
Not rated
|
Oct 14, 2023 |
| CVE-2023-42792 |
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with…
|
Not rated
|
Oct 14, 2023 |
| CVE-2023-45348 |
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve…
|
Not rated
|
Oct 14, 2023 |
| CVE-2023-42780 |
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to…
|
Not rated
|
Oct 14, 2023 |
| CVE-2023-40712 |
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to…
|
Not rated
|
Sep 12, 2023 |