apache-airflow-providers-fab vulnerabilities (PyPI)

3 vulnerabilities.

• apache-airflow-providers-fab PyPI Apache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/token CVE-2026-46745 Fix available 5.3 MediumMay 25, 2026
• apache-airflow-providers-fab PyPI Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli CVE-2024-45033 Fix available 8.1 HighJanuary 8, 2025
• apache-airflow-providers-fab PyPI Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow CVE-2024-42447 Fix available 9.8 CriticalAugust 5, 2024