Package · Wolfi

airflow

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2025-43859

h11 accepts some malformed Chunked-Encoding bodies

h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in versio…

python-hyper h11 kserve-storage-controller kubeflow-pipelines-visualization-server Debian Ubuntu Wolfi PyPI

Apr 24, 2025
Critical 9.8

CVE-2024-42447

Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow

Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from loggin…

Apache Software Foundation Apache Airflow Providers FAB apache-airflow airflow Wolfi PyPI

Aug 5, 2024