Skip to content
OpenAdvisories

Package · PyPI

apache-airflow

158 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13927 Exploited Public exploit Scanner template EPSS 100%

    Authentication bypass in Apache Airflow

    The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …

    KEV Jan 18, 2022