Description
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Airflow | 1.10.10 and below | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | apache-airflow | < 1.10.11 | 1.10.11 | GHSA-j38c-25fj-mr84 |
| PyPI | apache-airflow | < 1.10.11rc1 | 1.10.11rc1 | PYSEC-2020-23 |