apache-airflow
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 299 advisory(ies) without a verdict
Advisories (299)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-22hf-vx2v-gjff Apache Airflow exposes deferred trigger kwargs in task-instance API responses | < 3.3.0 | Undetermined |
| GHSA-2522-mrjc-m688 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used | 2.7.0 – < 2.9.0 | Undetermined |
| GHSA-269x-pg5c-5xgm Apache Airflow Execution with Unnecessary Privileges | < 2.6.0b1 | Undetermined |
| GHSA-273c-4g26-4jpm Apache Airflow `/api/v2/dagReports` executes DAG Python in API | 3.0.0 – < 3.1.1 | Undetermined |
| GHSA-2883-wwh7-x57v Apache Airflow: Incomplete redaction allowlist exposes secrets in Connection `extra` to read-permitted users | < 3.2.2 | Undetermined |
| GHSA-2943-9672-r45w Apache Airflow allows code execution through unsafe serialized DAG deserialization | < 3.3.0 | Undetermined |
| GHSA-2h84-3crq-vgfj Apache Airflow Incorrect Authorization vulnerability | < 2.6.3 | Undetermined |
| GHSA-2qjv-p2gc-mjg2 Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler | 3.3.0 – < 3.3.1 | Undetermined |
| GHSA-2r5m-76wx-56gx Apache Airflow Vulnerable to Deserialization of Untrusted Data | 3.2.0 – < 3.2.2 | Undetermined |
| GHSA-32wr-qqw6-5mfp Apache Airflow vulnerable to sensitive information exposure | < 2.7.2 | Undetermined |
| GHSA-3322-mjxh-9mp5 Apache Airflow exposes unreadable DAG identifiers in the scheduling dependencies graph | < 3.3.0 | Undetermined |
| GHSA-33g2-gx67-c2h3 Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor | < 3.2.2 | Undetermined |
| GHSA-3h4m-m55v-gx4m Apache Airflow Improper Input Validation vulnerability | < 2.6.3 | Undetermined |
| GHSA-3q8r-f3pj-3gc4 Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API | < 2.4.1rc1 | Undetermined |
| GHSA-3qmm-r55x-hpxx Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated | 3.1.0 – < 3.1.6 | Undetermined |
| GHSA-3v7g-4pg3-7r6j OS Command injection in Apache Airflow | < 2.2.4 | Undetermined |
| GHSA-3xxv-p78r-4fc6 Cross-site Scripting in Apache Airflow | < 1.10.15 ; 2.0.0a1 – < 2.0.2 | Undetermined |
| GHSA-45r6-j3cc-6mxx OS Command Injection in Apache Airflow | < 2.3.0 | Undetermined |
| GHSA-4fg5-j4mm-wfpg Apache Airflow contains open redirect | 2.3.0 – < 2.4.0rc1 | Undetermined |
| GHSA-4fh7-7jx4-8f6c apache-airflow DAG source authorization bypass exposes co-located DAG source | < 3.3.0 | Undetermined |
| GHSA-4fhm-p86v-hwpx Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications | 3.0.0 – < 3.1.8 | Undetermined |
| GHSA-4g48-54q2-fg7q Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access | < 3.1.8 | Undetermined |
| GHSA-4jh2-3c85-q67h Improper Privilege Management in apache-airflow | < 2.2.0 | Undetermined |
| GHSA-4m3h-wp5w-5hqh Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata | 3.0.0 – < 3.1.8 | Undetermined |
| GHSA-4pwq-fj89-6rjc Apache Airflow Cross-site Scripting | < 1.10.12 | Undetermined |
| GHSA-5247-m8w9-2v4m Apache Airflow missing team context permits cross-team Dag actions and XCom reads | < 3.3.1 | Undetermined |
| GHSA-52gm-qmg3-r4qp Apache Airflow: XSS vulnerability in Task Instance Log/Log Details | 2.9.0 – < 2.9.1 | Undetermined |
| GHSA-563f-2439-rmq4 Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API | < 3.3.0 | Undetermined |
| GHSA-5938-79hg-xh3q Apache Airflow Improper Access Control vulnerability | < 2.8.0 | Undetermined |
| GHSA-5946-8p38-vffp Apache Airflow Improper Input Validation vulnerability | < 2.6.3 | Undetermined |
| GHSA-5f35-pq34-c87q Apache Airflow missing Certificate Validation | < 2.7.0 | Undetermined |
| GHSA-5ff8-7639-6v6g Apache Airflow Session Fixation vulnerability | 2.2.4 – < 2.3.4rc1 | Undetermined |
| GHSA-5g2w-9f8g-g5q7 Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users | < 3.1.7 | Undetermined |
| GHSA-5rp4-749p-vx26 Apache Airflow vulnerable to Use of Externally-Controlled Format String | 2.3.0 – < 2.4.0rc1 | Undetermined |
| GHSA-65xw-pcqw-hjrh Apache Airflow Cross-site Scripting Vulnerability | < 2.2.4rc1 | Undetermined |
| GHSA-666g-rfc5-c9jv Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability | 1.10.0 – < 2.7.0 | Undetermined |
| GHSA-68wv-rjrm-576p Cross-Site Request Forgery (CSRF) in Apache Airflow | < 1.9.0 | Undetermined |
| GHSA-6hcw-qqr8-pjj8 Apache Airflow: Authenticated users can bypass the `is_safe_url` check | < 3.2.2 | Undetermined |
| GHSA-6m9r-7wrx-xmr6 Apache Airflow Cross-Site Request Forgery vulnerability | 2.7.0 – < 2.8.0 | Undetermined |
| GHSA-6pw3-8h9w-32gc Apache Airflow vulnerable to OS Command Injection via example DAGs | < 2.4.0 | Undetermined |
| GHSA-6r3p-fcvm-xh7c SSRF vulnerability in Apache Airflow | < 1.10.13 | Undetermined |
| GHSA-6v6w-h8m6-7mv2 Apache Airflow: DAG Code and Import Error Permissions Ignored | < 2.8.2 | Undetermined |
| GHSA-6xwf-xvf3-v459 Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users | < 2.8.2 | Undetermined |
| GHSA-75mg-c62r-v95g Apache Airflow environment-variable secrets backend permits cross-team credential use | < 3.3.1 | Undetermined |
| GHSA-77rc-x84q-pv4f Improper Certificate Validation in Apache Airflow | < 1.10.1 | Undetermined |
| GHSA-799x-qp47-8qwq Apache Airflow has no certificate validation on SMTP STARTTLS connections | 2.0.0 – < 3.2.2 | Undetermined |
| GHSA-7c2f-r6gc-h92h Apache Airflow proxy credentials for various providers might leak in task logs | 3.0.0b1 – < 3.1.6 ; < 2.11.1 | Undetermined |
| GHSA-7mx5-x372-xh87 Incorrect Session Validation in Apache Airflow | < 1.10.14 | Undetermined |
| GHSA-7wqf-h36w-47mc OS Command Injection in Apache Airflow | < 2.3.0 | Undetermined |
| GHSA-86vp-x3pr-79rx Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944 | < 1.10.15rc1 ; 2.0.0b1 – < 2.0.2rc1 | Undetermined |
| GHSA-89cj-xrpx-j79m Apache Airflow has a Link Following issue | < 3.2.2 | Undetermined |
| GHSA-8f57-wcmg-4jmh Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere | < 2.8.0 | Undetermined |
| GHSA-8fg4-j562-mjrc Improper Input Validation in Apache Airflow resulting in Remote Code Execution | < 1.9.0 | Undetermined |
| GHSA-8p7v-2jvj-v54r Apache Airflow vulnerable to Stored XSS | < 1.10.3 | Undetermined |
| GHSA-8prw-8m6x-8w6f Apache Airflow exception-node deserialization permits arbitrary callable execution | 3.3.0 – < 3.3.1 | Undetermined |
| GHSA-8r55-rv5w-6pfm Apache Airflow exposes sensitive information in its log files | < 2.11.1 | Undetermined |
| GHSA-8x34-9q3v-h7g8 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization | 3.1.0 – < 3.1.8 | Undetermined |
| GHSA-92xg-gmrq-5c3w Apache Airflow vulnerable to Execution with Unnecessary Privileges | < 2.10.1 | Undetermined |
| GHSA-95v7-h9j5-gvjr Apache Airflow has a Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | 3.0.0 – < 3.2.2 | Undetermined |
| GHSA-976r-qfjj-c24w Command injection via Celery broker in Apache Airflow | < 1.10.11rc1 | Undetermined |
| GHSA-9933-5rrp-mfwx Apache Airflow exposes secrets backend credentials through the Config API | < 3.3.0 | Undetermined |
| GHSA-99cv-8cvv-666c Apache Airflow vulnerable to Stored XSS | < 1.10.2 | Undetermined |
| GHSA-9g2w-5f3v-mfmm Insecure default config of Celery worker in Apache Airflow | < 1.10.11 | Undetermined |
| GHSA-9gqg-3fxr-9hv7 Apache Airflow vulnerable to XSS | < 1.9.0 | Undetermined |
| GHSA-9qqg-mh7c-chfq Apache Airflow vulnerable to Exposure of Sensitive Information | 2.4.0 – < 2.7.2 | Undetermined |
| GHSA-9xpj-62mm-24h2 Apache Airflow does not return the "Cache-Control" header for dynamic content | < 2.9.2 | Undetermined |
| GHSA-c392-whpc-vfpr Apache Airflow vulnerable to Improper Encoding or Escaping of Output | 2.10.0 – < 2.10.1 | Undetermined |
| GHSA-c3c6-f2ww-xfr2 Apache Airflow: pickle deserialization vulnerability in XComs | < 2.8.1rc1 | Undetermined |
| GHSA-c56v-8w4g-3mfm Apache Airflow Config API exposes team-scoped sensitive configuration values | 3.3.0 – < 3.3.1 | Undetermined |
| GHSA-c732-xvv8-g94c Command Injection in Apache Airflow and Apache Airflow MySQL Provider | < 2.5.1 | Undetermined |
| GHSA-c85c-g9wv-pph2 Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine | 3.0.0 – < 3.2.2 | Undetermined |
| GHSA-c92r-g8j5-vhcx Apache Airflow: JWT token still valid after logout | 3.0.0 – < 3.2.0 | Undetermined |
| GHSA-cff3-5qrp-hqx7 Apache Airflow Improper Preservation of Permissions vulnerability | 2.8.2 – < 2.8.4 | Undetermined |
| GHSA-cg3x-89rc-x9mw Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor | < 3.2.2 | Undetermined |
| GHSA-cgx2-rrmr-jx43 Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs | < 2.7.2 | Undetermined |
| GHSA-cjv4-7hp2-2x9h Apache Airflow bulk endpoints log Variable and Connection secrets in cleartext | < 3.3.1 | Undetermined |
| GHSA-cvcq-gmc3-q6m8 Apache Airflow logs passwords in plaintext | < 1.10.13 | Undetermined |
| GHSA-f3c2-j7g8-vpp8 Apache Airflow Task SDK fails to mask list-shaped JSON Variables | < 3.3.1 | Undetermined |
| GHSA-f643-3rc2-j27w Apache Airflow exposes dict-valued var.json secrets in Rendered Templates | < 3.3.1 | Undetermined |
| GHSA-f9fq-78ch-4wmj Apache Airflow Open Redirect vulnerability | < 2.4.2rc1 | Undetermined |
| GHSA-fcmm-42r9-mmmm Apache Airflow XCom API permits unsafe deserialization through JSON string literals | < 3.3.1 | Undetermined |
| GHSA-ffw3-6mp6-jmvj Improper Access Control in Apache Airflow | 2.0.0 – < 2.0.1rc1 | Undetermined |
| GHSA-fh37-cx83-q542 Improper Authentication in Apache Airflow | 2.0.0 – < 2.0.1rc1 | Undetermined |
| GHSA-fpxx-xv4c-gxqp Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only | 2.7.0 – < 2.7.2 | Undetermined |
| GHSA-fv47-pqh6-wxgq Apache Airflow exposes secret values to authenticated UI users via rendered templates | 3.1.0 – < 3.1.5 | Undetermined |
| GHSA-fvw2-2pf7-77vw Apache Airflow subject to Exposure of Sensitive Information | < 2.3.1 | Undetermined |
| GHSA-g4qj-5vxv-wggf Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables | < 3.3.1 | Undetermined |
| GHSA-g5hv-r743-v8pm Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler | 2.4.0 – < 2.9.3 | Undetermined |
| GHSA-gfw7-2v73-69wg Apache Airflow error reporting may expose full kwargs | < 2.11.1 ; 3.0.0b1 – < 3.1.5rc1 | Undetermined |
| GHSA-ggwr-4vr8-g7wv Apache Airflow Path Traversal vulnerability | < 2.6.3 | Undetermined |
| GHSA-gp5f-cx7h-8q6f Apache Airflow's create action can upsert existing Pools/Connections/Variables | 3.0.0 – < 3.1.1 | Undetermined |
| GHSA-gprj-xvq8-w53q Apache Airflow has an Improper Authorization issue | 3.0.0 – < 3.2.2 | Undetermined |
| GHSA-h574-6646-vfxx Apache Airflow: Ignored Airflow Permission | 2.8.0 – < 2.8.3rc1 | Undetermined |
| GHSA-h63r-9xxf-f2c7 Apache Airflow Cross-site Scripting vulnerability | < 2.4.2rc1 | Undetermined |
| GHSA-h6g5-wqqr-3mw3 Sensitive Information in Error Messages in Apache Airflow | < 2.5.2rc1 | Undetermined |
| GHSA-h88f-r7cw-8fv3 Missing Authentication for Critical Function in Apache Airflow | 2.0.0 – < 2.1.3 | Undetermined |
| GHSA-hhx9-p69v-cx2j Authentication bypass in Apache Airflow | < 1.10.11 | Undetermined |
| GHSA-hm9r-7f84-25c9 Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes | < 2.7.3 | Undetermined |
| GHSA-j38c-25fj-mr84 Stored XSS in Apache Airflow | < 1.10.11 | Undetermined |
| GHSA-j3w8-2p2h-mrr9 Apache Airflow vulnerable to privilege escalation | < 2.7.2 | Undetermined |
| GHSA-j482-47xf-p25c Apache Airflow Potential Cross-site Scripting Vulnerability | < 2.9.3 | Undetermined |
| GHSA-j4jc-cq9h-xrhr Apache Airflow Backfill API parser discrepancy permits cross-DAG authorization bypass | < 3.3.1 | Undetermined |
| GHSA-j857-2pwm-jjmm Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data | < 2.10.3 | Undetermined |
| GHSA-j86x-fwp2-qh7v Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI | 3.0.0 – < 3.2.0 | Undetermined |
| GHSA-jchm-fm4q-c2fp Apache Airflow vulnerable to Privilege Context Switching Error | < 2.6.0b1 | Undetermined |
| GHSA-m6h2-jx9v-58w6 Missing Authorization in Apache Airflow | < 2.1.2 | Undetermined |
| GHSA-mc4f-r875-v87w Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API | 3.1.8 – < 3.2.0 | Undetermined |
| GHSA-mg2x-mggj-6955 Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service | 2.3.0 – < 2.6.1 | Undetermined |
| GHSA-mjff-wv85-hmcj Apache Airflow vulnerable to exposure of sensitive information | 2.5.0 – < 2.6.2rc1 | Undetermined |
| GHSA-mjqh-v5f2-g2mw Apache Airflow information exposure vulnerability | < 2.7.1 | Undetermined |
| GHSA-mxq5-f9c5-w4p5 Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key | 3.2.0 – < 3.2.2 | Undetermined |
| GHSA-p3v3-229h-mc63 Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record | < 3.2.1rc1 | Undetermined |
| GHSA-phv5-vq5p-qhp7 Apache Airflow: JWT token appearing in logs | 3.0.0 – < 3.2.0 | Undetermined |
| GHSA-pm44-x5x7-24c4 Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access | 3.1.0 – < 3.1.7 | Undetermined |
| GHSA-pm87-24wq-r8w9 Apache Airflow Session Fixation vulnerability | < 2.7.0rc2 | Undetermined |
| GHSA-pxch-wr7m-rwxj Apache Airflow has a stored cross-site scripting vulnerability | 2.6.0 – < 2.8.0b1 | Undetermined |
| GHSA-q2hg-643c-gw8h Apache Airflow: RCE by race condition in example_xcom dag | < 3.2.0 | Undetermined |
| GHSA-q475-2pgm-7hvp Apache Airflow: Connection sensitive details exposed to users with READ permissions | 3.0.3 – < 3.0.4 | Undetermined |
| GHSA-q4c3-7575-55j2 Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs | 3.3.0 – < 3.3.1 | Undetermined |
| GHSA-q4p3-qw5c-mhpc Multiple stored XSS in RBAC Admin screens in Apache Airflow | < 1.10.11 | Undetermined |
| GHSA-q8h9-pqcx-59hw Apache Airflow exposes arbitrary file content | < 2.3.4 | Undetermined |
| GHSA-qphr-3mvq-v466 Apache Airflow has an Authorization Bypass Through User-Controlled Key | < 3.2.2 | Undetermined |
| GHSA-r7vr-m4jw-r794 Apache Airflow has an authorization bypass in DagRun wait endpoint | 3.0.0 – < 3.2.0 | Undetermined |
| GHSA-r7x6-xfcm-3mxv Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor | < 2.7.3 | Undetermined |
| GHSA-r837-hpv7-pc2f Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table | < 2.11.1 | Undetermined |
| GHSA-rg94-84xj-7gq3 Apache Airflow Contains Open Redirect | < 2.4.3 | Undetermined |
| GHSA-rjvg-q57v-mjjc XSS in Apache Airflow | < 1.10.5 | Undetermined |
| GHSA-rmf2-pwfq-h75j OS Command Injection in Apache Airflow | < 2.3.0 | Undetermined |
| GHSA-rv25-9wgj-xg75 Apache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint | < 1.9.0 | Undetermined |
| GHSA-rvmq-4x66-q7j3 Remote code execution (RCE) in Apache Airflow | < 1.10.11rc1 | Undetermined |
| GHSA-v3c9-j6h9-66v4 Apache Airflow has a command injection vulnerability in "example_dag_decorator" | 3.0.0 – < 3.0.5 | Undetermined |
| GHSA-vcf6-3wv2-5vcr Apache Airflow vulnerable to stored Cross-site Scripting | < 2.6.0 | Undetermined |
| GHSA-vm5m-qmrx-fw8w Apache Airflow: Bypass permission verification to read code of other dags | < 2.8.1rc1 | Undetermined |
| GHSA-vr7m-c6v4-8cx8 Apache Airflow: Auth manager doesn't invalidate JWT tokens after users click logout | < 3.2.2 | Undetermined |
| GHSA-w6j4-3gh2-9f5j Apache Airflow vulnerable to CSRF Attacks | < 1.10.3 | Undetermined |
| GHSA-w7cp-g8v7-r54m Apache Airflow Cross-site Scripting Vulnerability | < 2.10.0 | Undetermined |
| GHSA-w7rc-q6cm-f5gm Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions | < 3.2.1rc1 | Undetermined |
| GHSA-w9r4-94fj-xp69 Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries | 3.0.0 – < 3.2.0 | Undetermined |
| GHSA-wpg8-mf6h-gm92 Apache Airflow Incorrect Authorization vulnerability | < 2.7.1 | Undetermined |
| GHSA-wr76-29cr-67w8 Apache Airflow has a Deserialization of Untrusted Data vulnerability | 3.2.0 – < 3.2.2 | Undetermined |
| GHSA-wrpj-755p-x363 Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange | 1.10.0 – < 1.12.0 | Undetermined |
| GHSA-x2mh-8fmc-rqgh Apache Airflow denial of service vulnerability | < 2.7.0b1 | Undetermined |
| GHSA-x2x7-p37c-43cr Apache Airflow has a Missing Authorization issue | 3.2.0 – < 3.2.2 | Undetermined |
| GHSA-x3fv-96qh-67m7 Apache Airflow: DAG authorization bypass | 3.0.0 – < 3.1.8 | Undetermined |
| GHSA-x5wm-j6wh-2834 Apache Airflow has an Incorrect Authorization issue | 3.0.0 – < 3.2.2 | Undetermined |
| GHSA-xvw9-3mhm-xjqq Apache Airflow information disclosure vulnerability | < 2.6.3 | Undetermined |
| PYSEC-2018-45 It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the | < 1.9.0 | Undetermined |
| PYSEC-2019-142 In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on cert | < 1.10.2 | Undetermined |
| PYSEC-2019-143 The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions w | < 1.10.1 | Undetermined |
| PYSEC-2019-147 In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object. | < 1.9.0 | Undetermined |
| PYSEC-2019-148 In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow. | < 1.9.0 | Undetermined |
| PYSEC-2019-149 In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An atta | < 1.9.0 | Undetermined |
| PYSEC-2019-214 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. | < 1.10.3b1 | Undetermined |
| PYSEC-2019-215 A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery a | < 1.10.3b1 | Undetermined |
| PYSEC-2019-216 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also present | < 1.10.6rc1 | Undetermined |
| PYSEC-2020-14 An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped | < 1.10.11rc1 | Undetermined |
| PYSEC-2020-15 An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, | < 1.10.11rc1 | Undetermined |
| PYSEC-2020-16 An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, i | < 1.10.11rc1 | Undetermined |
| PYSEC-2020-162 In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to e | < 1.10.5 | Undetermined |
| PYSEC-2020-17 An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping | < 1.10.11rc1 | Undetermined |
| PYSEC-2020-18 The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who mis | < 1.10.11 | Undetermined |
| PYSEC-2020-19 In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. | < 1.10.12 | Undetermined |
| PYSEC-2020-20 In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack. | < 1.10.13 | Undetermined |
| PYSEC-2020-21 The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.1 | < 1.10.13 | Undetermined |
| PYSEC-2020-22 Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log | < 1.10.14 | Undetermined |
| PYSEC-2020-23 An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI. | < 1.10.11rc1 | Undetermined |
| PYSEC-2020-262 In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Sam | < 1.10.13 | Undetermined |
| PYSEC-2021-122 If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is lis | < 2.1.2 | Undetermined |
| PYSEC-2021-2 Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations incl | < 2.0.1 | Undetermined |
| PYSEC-2021-3 The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that end | < 2.0.1 | Undetermined |
| PYSEC-2021-326 The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1.3. This allowed unauthenticated users to hit that endpoint to add/modi | 2.0.0 – < 2.1.3 | Undetermined |
| PYSEC-2021-4 The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x | 1.8.1 – < 1.10.15 ; 2.0.0 – < 2.0.2 | Undetermined |
| PYSEC-2022-11 In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags tha | 1.10.0 – < 2.0.0b1 ; 2.0.0 – < 2.2.0 | Undetermined |
| PYSEC-2022-261 In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a | < 2.3.4 | Undetermined |
| PYSEC-2022-263 In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation. | 2.2.4 – < 2.3.4rc1 | Undetermined |
| PYSEC-2022-279 In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction. | 2.3.0 – < 2.4.0b1 | Undetermined |
| PYSEC-2022-280 In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint. | 2.3.0 – < 2.4.0b1 | Undetermined |
| PYSEC-2022-29 It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow ve | < 2.2.4rc1 | Undetermined |
| PYSEC-2022-30 In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection fro | < 2.2.4 | Undetermined |
| PYSEC-2022-42970 In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. | < 2.4.2 | Undetermined |
| PYSEC-2022-42971 In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint. | < 2.4.2 | Undetermined |
| PYSEC-2022-42981 A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example w | < 2.3.1 | Undetermined |
| PYSEC-2022-42982 A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided ru | < 2.4.0 | Undetermined |
| PYSEC-2022-42983 In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API. | < 2.4.2rc1 | Undetermined |
| PYSEC-2022-42984 In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint. | < 2.4.3 | Undetermined |
| PYSEC-2023-103 Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection ed | < 2.6.3 | Undetermined |
| PYSEC-2023-104 Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory | < 2.6.3 | Undetermined |
| PYSEC-2023-105 Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter | < 2.6.3 | Undetermined |
| PYSEC-2023-106 Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended | < 2.6.3 | Undetermined |
| PYSEC-2023-119 Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrad | < 2.6.3 | Undetermined |
| PYSEC-2023-134 Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.T | < 2.6.0 | Undetermined |
| PYSEC-2023-136 Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. | < 2.4.3 | Undetermined |
| PYSEC-2023-152 Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileg | < 2.7.0 | Undetermined |
| PYSEC-2023-158 The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by | < 2.7.1rc1 | Undetermined |
| PYSEC-2023-170 Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail valu | < 2.7.1 | Undetermined |
| PYSEC-2023-171 Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a | < 2.7.1 | Undetermined |
| PYSEC-2023-197 Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about t | < 2.7.2 | Undetermined |
| PYSEC-2023-2 Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: befor | < 2.5.2 | Undetermined |
| PYSEC-2023-202 Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the | < 2.7.2 | Undetermined |
| PYSEC-2023-203 Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a req | < 2.7.2 | Undetermined |
| PYSEC-2023-204 Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when | 2.7.0 – < 2.7.2 | Undetermined |
| PYSEC-2023-218 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0. | 2.4.0 – < 2.7.0 | Undetermined |
| PYSEC-2023-231 Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about t | < 2.7.3 | Undetermined |
| PYSEC-2023-232 We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. | < 2.7.3 | Undetermined |
| PYSEC-2023-264 Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the par | 2.6.0 – < 2.8.0b1 | Undetermined |
| PYSEC-2023-265 Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a req | < 2.8.0 | Undetermined |
| PYSEC-2023-266 Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, | 2.7.0 – < 2.8.0b1 | Undetermined |
| PYSEC-2023-267 Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variab | < 2.8.0 | Undetermined |
| PYSEC-2023-3 Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3 | < 2.3.2 | Undetermined |
| PYSEC-2023-314 Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. | < 3.1.1 | Undetermined |
| PYSEC-2023-59 Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0. | < 2.6.0 | Undetermined |
| PYSEC-2023-60 Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0. | < 2.6.0 | Undetermined |
| PYSEC-2023-89 In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. | 2.5.0 – < 2.6.2 | Undetermined |
| PYSEC-2024-13 Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enable_xcom | < 2.8.1 | Undetermined |
| PYSEC-2024-14 Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access | < 2.8.1 | Undetermined |
| PYSEC-2024-181 Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when cli | < 2.10.0 | Undetermined |
| PYSEC-2024-182 Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG au | < 2.10.3 | Undetermined |
| PYSEC-2024-189 Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are | < 2.9.3 | Undetermined |
| PYSEC-2024-190 Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execu | 2.4.0 – < 2.9.3 | Undetermined |
| PYSEC-2024-195 Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. | < 2.9.2 | Undetermined |
| PYSEC-2024-212 Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG folder and get it executed by the scheduler, | < 2.10.1 | Undetermined |
| PYSEC-2024-245 Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permissio | < 2.8.2 | Undetermined |
| PYSEC-2024-264 Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. | ≤ 2.9.0-NA ; ≤ 2.9.0-beta1 ; ≤ 2.9.0-beta2 ; … | Undetermined |
| PYSEC-2024-265 Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. | ≤ 1.2.1 ; ≤ 1.2.0 | Undetermined |
| PYSEC-2024-266 Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG tri | ≤ 2.10.0-NA | Undetermined |
| PYSEC-2024-42 Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag | < 2.8.2 | Undetermined |
| PYSEC-2024-46 Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variabl | 2.8.0 – < 2.8.3rc1 | Undetermined |
| PYSEC-2025-85 Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields t | ≤ 3.0.3-NA | Undetermined |
| PYSEC-2025-86 A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potenti | 3.1.0 – < 3.1.4 | Undetermined |
| PYSEC-2025-87 Edge3 Worker RPC RCE on Airflow 2. | < 2.0.0 | Undetermined |
| PYSEC-2026-10 In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication i | < 3.1.6 | Undetermined |
| PYSEC-2026-11 Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to | 3.1.0 – < 3.1.7 | Undetermined |
| PYSEC-2026-1128 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used | 2.7.0 – < 2.9.0 | Undetermined |
| PYSEC-2026-1129 Apache Airflow `/api/v2/dagReports` executes DAG Python in API | 3.0.0 – < 3.1.1 | Undetermined |
| PYSEC-2026-1130 Apache Airflow missing Certificate Validation | < 2.7.0 | Undetermined |
| PYSEC-2026-1131 Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability | 1.10.0 – < 2.7.0 | Undetermined |
| PYSEC-2026-1132 Apache Airflow Improper Preservation of Permissions vulnerability | 2.8.2 – < 2.8.4 | Undetermined |
| PYSEC-2026-1133 Apache Airflow's create action can upsert existing Pools/Connections/Variables | 3.0.0 – < 3.1.1 | Undetermined |
| PYSEC-2026-1134 Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data | < 2.10.3 | Undetermined |
| PYSEC-2026-1135 Apache Airflow has a command injection vulnerability in "example_dag_decorator" | 3.0.0 – < 3.0.5 | Undetermined |
| PYSEC-2026-12 Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors g | 3.0.0 – < 3.1.7 | Undetermined |
| PYSEC-2026-13 Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. | < 3.2.0 | Undetermined |
| PYSEC-2026-14 Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id s | 3.0.0 – < 3.1.8 | Undetermined |
| PYSEC-2026-15 Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows | 3.0.0 – < 3.1.8 | Undetermined |
| PYSEC-2026-16 Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_u | 3.0.0 – < 3.1.8 | Undetermined |
| PYSEC-2026-17 Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authen | 3.1.0 – < 3.1.8 | Undetermined |
| PYSEC-2026-171 Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow API server behind an HTTPS-termina | 3.0.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-172 A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret` / `api_key` keys ins | < 3.2.2 | Undetermined |
| PYSEC-2026-173 A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission | < 3.2.2 | Undetermined |
| PYSEC-2026-174 Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's Lo | 3.0.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-18 In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additi | < 3.2.0 | Undetermined |
| PYSEC-2026-181 A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path atta | < 3.2.2 | Undetermined |
| PYSEC-2026-182 The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with glob | 3.2.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-183 A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the | 3.2.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-184 Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command | 3.0.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-185 A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set | 3.2.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-186 Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported and dispatched arbitrary class paths dra | < 3.2.2 | Undetermined |
| PYSEC-2026-187 A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for `Fab | < 3.2.2 | Undetermined |
| PYSEC-2026-19 Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fiel | 3.0.0 – < 3.2.0 | Undetermined |
| PYSEC-2026-20 Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. | 3.1.8 – < 3.2.0 | Undetermined |
| PYSEC-2026-2082 A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a se | < 3.3.0 | Undetermined |
| PYSEC-2026-2083 Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSourc | < 3.3.0 | Undetermined |
| PYSEC-2026-2086 A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still em | < 3.3.0 | Undetermined |
| PYSEC-2026-2087 The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLO | < 3.3.0 | Undetermined |
| PYSEC-2026-2088 In Apache Airflow before 3.3.0, the REST API task-instance detail and list | < 3.3.0 | Undetermined |
| PYSEC-2026-21 Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Vi | 3.0.0 – < 3.2.0 | Undetermined |
| PYSEC-2026-2343 Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor | < 3.2.2 | Undetermined |
| PYSEC-2026-2344 Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access | < 3.1.8 | Undetermined |
| PYSEC-2026-2345 Apache Airflow: Authenticated users can bypass the `is_safe_url` check | < 3.2.2 | Undetermined |
| PYSEC-2026-2346 Apache Airflow has no certificate validation on SMTP STARTTLS connections | 2.0.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-2347 Apache Airflow exposes sensitive information in its log files | < 2.11.1 | Undetermined |
| PYSEC-2026-2348 Apache Airflow error reporting may expose full kwargs | < 2.11.1 ; 3.0.0b1 – < 3.1.5rc1 | Undetermined |
| PYSEC-2026-2349 Apache Airflow has an Improper Authorization issue | 3.0.0 – < 3.2.2 | Undetermined |
| PYSEC-2026-2350 Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service | 2.3.0 – < 2.6.1 | Undetermined |
| PYSEC-2026-2351 Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record | < 3.2.1rc1 | Undetermined |
| PYSEC-2026-2352 Apache Airflow: JWT token appearing in logs | 3.0.0 – < 3.2.0 | Undetermined |
| PYSEC-2026-2353 Apache Airflow: RCE by race condition in example_xcom dag | < 3.2.0 | Undetermined |
| PYSEC-2026-2354 Apache Airflow has an Authorization Bypass Through User-Controlled Key | < 3.2.2 | Undetermined |
| PYSEC-2026-2355 Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table | < 2.11.1 | Undetermined |
| PYSEC-2026-2356 Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions | < 3.2.1rc1 | Undetermined |
| PYSEC-2026-2357 Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange | 1.10.0 – < 1.12.0 | Undetermined |
| PYSEC-2026-267 OS Command Injection in Apache Airflow | < 2.3.0 | Undetermined |
| PYSEC-2026-268 Command Injection in Apache Airflow and Apache Airflow MySQL Provider | < 2.5.1 | Undetermined |
| PYSEC-2026-269 Apache Airflow: JWT token still valid after logout | 3.0.0 – < 3.2.0 | Undetermined |
| PYSEC-2026-270 OS Command Injection in Apache Airflow | < 2.3.0 | Undetermined |
| PYSEC-2026-3705 Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not desc | < 3.3.1 | Undetermined |
| PYSEC-2026-3706 Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an `isinstanc | < 3.3.1 | Undetermined |
| PYSEC-2026-3707 Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the t | 3.3.0 – < 3.3.1 | Undetermined |
| PYSEC-2026-3708 Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback | 3.3.0 – < 3.3.1 | Undetermined |
| PYSEC-2026-3709 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this | < 3.3.1 | Undetermined |
| PYSEC-2026-3710 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The authoriz | < 3.3.1 | Undetermined |
| PYSEC-2026-3711 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH / | < 3.3.1 | Undetermined |
| PYSEC-2026-3712 Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs | < 3.3.1 | Undetermined |
| PYSEC-2026-3806 Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API | < 3.3.0 | Undetermined |
| PYSEC-2026-3988 Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorize | < 3.3.2 | Undetermined |
| PYSEC-2026-3989 When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie | ≤ 3.3.0 ; ≤ 3.3.1 | Undetermined |
| PYSEC-2026-3990 Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an | 3.0.0 – < 3.3.2 | Undetermined |
| PYSEC-2026-3991 Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating | 3.3.0 – < 3.3.1 | Undetermined |
| PYSEC-2026-3992 Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` witho | < 3.3.1 | Undetermined |
Withdrawn advisories (1)
Withdrawn by their publisher: they affect no version and are not counted above.
- PYSEC-2020-181 In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to e · withdrawn
Sources
| Source | Licence |
|---|