| CVE-2026-96806 |
The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented…
|
Non notée
|
15 oct. 2026 |
| CVE-2026-92228 |
The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role…
|
Non notée
|
15 oct. 2026 |
| CVE-2026-76187 |
Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any…
|
Non notée
|
16 sept. 2026 |
| CVE-2026-76186 |
Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed…
|
Non notée
|
16 sept. 2026 |