Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Airflow CNCF Kubernetes provider

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-51702

    Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

    Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without any encr…

    Apache Software Foundation Apache Airflow Apache Airflow CNCF Kubernetes provider apache-airflow PyPI