apache-airflow-providers-sftp vulnerabilities (PyPI)

1 vulnerability.

• apache-airflow-providers-sftp PyPI Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names CVE-2026-50203 Fix available 9.1 CriticalJune 17, 2026