Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25691 EUVD-2023-0666GHSA-8g23-2q5p-8866PYSEC-2026-277

Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution

Published Feb 24, 2023 · Updated Mar 11, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Airflow Google provider Package: apache-airflow-providers-google Ecosystem: PyPI

Description

Improper Input Validation vulnerability in the Apache Airflow Google Provider.

This issue affects Apache Airflow Google Provider versions before 8.10.0.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Google Provider < 8.10.0 8.10.0

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow-providers-google < 8.10.0 8.10.0 GHSA-8g23-2q5p-8866

References