apache-airflow vulnerabilities (PyPI)
158 vulnerabilities.
apache-airflowPyPIApache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature8.1 Highapache-airflowPyPISession fixation in Apache Airflow web interface8.0 Highapache-airflowPyPIApache Airflow Drill Provider Arbitrary File Read Vulnerability7.5 Highapache-airflowPyPIApache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges8.8 Highapache-airflowPyPIApache Airflow: Scheduler remote DoS6.5 Mediumapache-airflowPyPIApache Airflow: ReDoS via dags function6.5 Mediumapache-airflowPyPIApache Airflow: Security vulnerability on AirFlow Connections6.5 Mediumapache-airflowPyPIApache Airflow path traversal by authenticated user6.5 Mediumapache-airflowPyPIApache Airflow: Access to DAGs without relevant permission6.5 Mediumapache-airflowPyPIApache Airflow: Information disclosure on configuration view6.5 Mediumapache-airflowPyPIApache Airflow: Privilege escalation using airflow logs9.8 Criticalapache-airflowPyPIStored XSS on Apache Airflow5.4 Mediumapache-airflowPyPIAirflow Apache Drill Provider Arbitrary File Read Vulnerability7.5 Highapache-airflowPyPIInformation disclosure in Apache Airflow5.3 Mediumapache-airflowPyPISqoop Apache Airflow Provider Remote Code Execution Vulnerability9.8 Criticalapache-airflowPyPIApache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow9.8 Criticalapache-airflowPyPIApache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files5.5 Mediumapache-airflowPyPIApache Airlfow Pig Provider RCE9.8 Criticalapache-airflowPyPIApache Airflow Pinot provider allowed Command Injection9.8 Criticalapache-airflowPyPIApache Airflow: Open redirect during login6.1 Mediumapache-airflowPyPIApache Airflow <2.4.0 has an RCE in a bash example8.8 Highapache-airflowPyPIApache Airflow prior to 2.3.1 may include sensitive values in rendered template7.5 Highapache-airflowPyPIApache Airflow prior to 2.4.2 has an open redirect6.1 Mediumapache-airflowPyPIApache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL6.1 Mediumapache-airflowPyPISession still functional after user is deactivated8.1 Highapache-airflowPyPIOpen Redirect6.1 Mediumapache-airflowPyPIFormat String Vulnerability7.5 Highapache-airflowPyPIOverly permissive umask for daemons4.7 Mediumapache-airflowPyPISession Fixation9.8 Criticalapache-airflowPyPIApache Airflow: RCE in example DAGs8.8 Highapache-airflowPyPIApache Airflow: Reflected XSS via Origin Query Argument in URL6.1 Mediumapache-airflowPyPIApache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver6.5 Mediumapache-airflowPyPIApache Airflow: Variable Import endpoint missed authentication check9.8 Criticalapache-airflowPyPINo Authentication on Logging Server5.3 Mediumapache-airflowPyPIApache Airflow Reflected XSS via Origin Query Argument in URL6.1 Mediumapache-airflowPyPIApache Airflow: Lineage API endpoint for Experimental API missed authentication check5.3 Mediumapache-airflowPyPICWE-284 Improper Access Control on Configurations Endpoint for the Stable API6.5 Mediumapache-airflowPyPIIncorrect Session Validation in Apache Airflow7.7 Highapache-airflowPyPISSRF vulnerability in Apache Airflow5.3 Mediumapache-airflowPyPIApache Airflow logs passwords in plaintext6.5 Mediumapache-airflowPyPIApache Airflow cross-site scripting due to incomplete fix for CVE-2020-139446.1 Mediumapache-airflowPyPIAuthentication bypass in Apache Airflow9.8 Criticalapache-airflowPyPIApache Airflow Cross-site Scripting6.1 Mediumapache-airflowPyPIStored XSS in Apache Airflow6.1 Mediumapache-airflowPyPIMultiple stored XSS in RBAC Admin screens in Apache Airflow5.4 Mediumapache-airflowPyPIInsecure default config of Celery worker in Apache Airflow9.8 Criticalapache-airflowPyPICommand injection via Celery broker in Apache Airflow9.8 Criticalapache-airflowPyPIRemote code execution (RCE) in Apache Airflow8.8 Highapache-airflowPyPIXSS in Apache Airflow4.8 Mediumapache-airflowPyPIApache Airflow vulnerable to XSS and local file disclosure4.8 Medium- Show moreLoading…