Skip to content
OpenAdvisories

Package · PyPI

airflow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-45784

    Apache Airflow: Sensitive configuration values are not masked in the logs by default

    Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users…

    Apache Software Foundation Apache Airflow apache-airflow airflow PyPI
  • Medium 4.8
    CVE-2019-12417

    Apache Airflow vulnerable to XSS and local file disclosure

    A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

    apache-airflow airflow PyPI