Apache Apache-airflow-providers-sftp vulnerabilities

• apache apache-airflow-providers-sftp, apache software foundation airflow sftp provider +1 more Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names CVE-2026-50203 Fix available 9.1 CriticalJune 17, 2026