| CVE-2024-45784 |
Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in…
|
Not rated
|
Nov 15, 2024 |
| CVE-2024-45034 |
Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG…
|
Not rated
|
Sep 7, 2024 |
| CVE-2024-45498 |
Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows…
|
Not rated
|
Sep 7, 2024 |
| CVE-2024-39877 |
Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
|
Not rated
|
Jul 17, 2024 |
| CVE-2024-39863 |
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious…
|
Not rated
|
Jul 17, 2024 |
| CVE-2024-32077 |
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the…
|
Not rated
|
May 14, 2024 |
| CVE-2024-29733 |
Improper Certificate Validation vulnerability in Apache Airflow FTP Provider
|
Not rated
|
Apr 21, 2024 |
| CVE-2024-29735 |
Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2…
|
Not rated
|
Mar 26, 2024 |
| CVE-2023-40273 |
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the…
|
Not rated
|
Aug 23, 2023 |
| CVE-2023-39508 |
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in…
|
Not rated
|
Aug 5, 2023 |
| CVE-2023-25754 |
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache…
|
Not rated
|
May 8, 2023 |
| CVE-2020-13927 |
Exploited
Apache Airflow's Experimental API Authentication Bypass
|
9.8
Critical
|
Nov 10, 2020 |
| CVE-2019-12398 |
In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of…
|
Not rated
|
Jan 14, 2020 |