Package · PyPI

apache-airflow

158 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2020-13927 Exploited Public exploit Scanner template EPSS 100%

Authentication bypass in Apache Airflow

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …

apache-airflow PyPI

Nov 10, 2020
KEV Jan 18, 2022
High 8.8

CVE-2020-11978 Exploited Public exploit Scanner template EPSS 99%

Remote code execution (RCE) in Apache Airflow

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user runnin…

Apache Software Foundation Apache Airflow apache-airflow PyPI

Jul 16, 2020
KEV Jan 18, 2022