Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-25695 BIT-airflow-2023-25695EUVD-2023-0021GHSA-h6g5-wqqr-3mw3PYSEC-2023-2

Information disclosure in Apache Airflow

Published Mar 15, 2023 · Updated Feb 13, 2025 · Assigned by apache

Description

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow < 2.5.2 2.5.2

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow < 2.5.2rc1 2.5.2rc1 GHSA-h6g5-wqqr-3mw3
PyPI apache-airflow < 2.5.2 2.5.2 PYSEC-2023-2

References