Apache Software Foundation Airflow Keycloak Provider vulnerabilities
- apache software foundation airflow keycloak providerApache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token5.8 Medium
- apache software foundation airflow keycloak providerApache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read6.5 Medium
- apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 moreApache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWT9.8 Critical
- apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 moreApache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity9.1 Critical