Skip to content
OpenAdvisories

Package · PyPI

airflow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2019-12417

    Apache Airflow vulnerable to XSS and local file disclosure

    A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

    apache-airflow airflow PyPI