Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25693 EUVD-2023-0729GHSA-j69x-v4wc-3fpfPYSEC-2023-314PYSEC-2026-275

Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

Published Feb 24, 2023 · Updated Feb 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Airflow Sqoop Provider Package: apache-airflow Package: apache-airflow-providers-apache-sqoop Ecosystem: PyPI

Description

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.

This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Sqoop Provider < 3.1.1 3.1.1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow < 3.1.1 3.1.1 PYSEC-2023-314
PyPI apache-airflow-providers-apache-sqoop < 3.1.1 3.1.1 GHSA-j69x-v4wc-3fpf

References