Skip to content
OpenAdvisories

Vendor

astronomer

1 known vulnerabilities.

Products

dag-factory 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-54415 Public exploit

    dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration

    dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repositor…

    astronomer dag-factory