Browse Security Advisories
Security Advisories for apache-airflow in pypi Clear Filters
Low
9 months ago
Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data
pypi
apache-airflow
High
12 months ago
Apache Airflow vulnerable to Execution with Unnecessary Privileges
pypi
apache-airflow
High
12 months ago
Apache Airflow vulnerable to Improper Encoding or Escaping of Output
pypi
apache-airflow
High
about 1 year ago
Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler
pypi
apache-airflow
Moderate
about 1 year ago
Apache Airflow Potential Cross-site Scripting Vulnerability
pypi
apache-airflow
Low
about 1 year ago
Apache Airflow does not return the "Cache-Control" header for dynamic content
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow: XSS vulnerability in Task Instance Log/Log Details
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow Improper Preservation of Permissions vulnerability
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow: DAG Code and Import Error Permissions Ignored
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
pypi
apache-airflow-providers-cncf-kubernetes, apache-airflow
High
over 1 year ago
Apache Airflow: pickle deserialization vulnerability in XComs
pypi
apache-airflow
High
over 1 year ago
Apache Airflow: Bypass permission verification to read code of other dags
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow Cross-Site Request Forgery vulnerability
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere
pypi
apache-airflow
Moderate
over 1 year ago
Apache Airflow has a stored cross-site scripting vulnerability
pypi
apache-airflow
High
almost 2 years ago
Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
pypi
apache-airflow
Moderate
almost 2 years ago
Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes
pypi
apache-airflow
High
almost 2 years ago
Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability
pypi
apache-airflow, apache-airflow-providers-celery
Moderate
almost 2 years ago
Apache Airflow vulnerable to Exposure of Sensitive Information
pypi
apache-airflow
Moderate
almost 2 years ago
Apache Airflow vulnerable to sensitive information exposure
pypi
apache-airflow
Moderate
almost 2 years ago
Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs
pypi
apache-airflow
Moderate
almost 2 years ago
Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only
pypi
apache-airflow
Moderate
almost 2 years ago
Apache Airflow Incorrect Authorization vulnerability
pypi
apache-airflow
Moderate
almost 2 years ago
Apache Airflow missing Certificate Validation
pypi
apache-airflow, apache-airflow-providers-imap, apache-airflow-providers-smtp
High
about 2 years ago
Apache Airflow vulnerable to exposure of sensitive information
pypi
apache-airflow
Critical
over 2 years ago
Apache Airflow vulnerable to Privilege Context Switching Error
pypi
apache-airflow
Moderate
over 2 years ago
Apache Airflow vulnerable to stored Cross-site Scripting
pypi
apache-airflow
Moderate
over 2 years ago
Sensitive Information in Error Messages in Apache Airflow
pypi
apache-airflow
Critical
over 2 years ago
Command Injection in Apache Airflow and Apache Airflow MySQL Provider
pypi
apache-airflow-providers-mysql, apache-airflow
High
almost 3 years ago
Apache Airflow subject to Exposure of Sensitive Information
pypi
apache-airflow
High
almost 3 years ago
Apache Airflow vulnerable to OS Command Injection via example DAGs
pypi
apache-airflow
High
almost 3 years ago
Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API
pypi
apache-airflow
High
almost 3 years ago
Apache Airflow vulnerable to Use of Externally-Controlled Format String
pypi
apache-airflow
Critical
about 3 years ago
Missing Authentication for Critical Function in Apache Airflow
pypi
apache-airflow
Moderate
over 3 years ago
Apache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint
pypi
apache-airflow
Moderate
over 4 years ago
Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944
pypi
apache-airflow
Critical
about 5 years ago
Insecure default config of Celery worker in Apache Airflow
pypi
apache-airflow
Critical
about 5 years ago
Command injection via Celery broker in Apache Airflow
pypi
apache-airflow
Moderate
about 5 years ago
Multiple stored XSS in RBAC Admin screens in Apache Airflow
pypi
apache-airflow
High
over 6 years ago
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
pypi
apache-airflow
Filter by Severity
Filter by Ecosystem
maven
6,744
packagist
5,372
pypi
4,868
npm
4,214
go
2,852
nuget
1,702
cargo
1,074
rubygems
928
hex
37
swift
36
actions
34
pub
10
Filter by Package
tensorflow
433
tensorflow-gpu
427
tensorflow-cpu
423
Django
107
apache-airflow
85
Plone
72
salt
65
ansible
63
apache-superset
61
mlflow
53
nova
48
django
46
vyper
44
gradio
44
rdiffweb
42
matrix-synapse
42
plone
41
moin
35
keystone
32
opencv-contrib-python
31
opencv-python
31
Pillow
29
pillow
28
open-webui
25
vllm
23
pyload-ng
22
glance
21
langchain
20
aim
20
neutron
19
mercurial
18
mindsdb
18
cobbler
18
calibreweb
17
notebook
17
cryptography
17
OctoPrint
17
PaddlePaddle
16
lollms
16
transformers
16
paddlepaddle
16
ethyca-fides
16
aiohttp
15
vantage6
14
litellm
14
urllib3
14
modoboa
14
pyftpdlib
14
zenml
13
roundup
13
h2o
13
mobsf
12
sentry
12
nautobot
12
twisted
12
wagtail
12
swift
12
horizon
11
onionshare-cli
11
label-studio
11
waitress
11
pgadmin4
11
trytond
11
Flask-AppBuilder
10
opencv-python-headless
10
pyspark
10
opencv-contrib-python-headless
10
cinder
9
ai.h2o:h2o-core
9
agentscope
9
lief
9
kiwitcms
9
ckan
9
python-keystoneclient
9
ryu
9
zope
9
llama-index
8
trac
8
bentoml
8
aubio
8
changedetection.io
8
picklescan
8
Zope
8
ipython
8
dbgpt
8
numpy
8
tornado
8
Zope2
8
web2py
7
pip
7
jupyter-server
7
executorch
7
matrix-sydent
7
copyparty
7
inventree
7
pysaml2
7
scrapy
7
Products.CMFPlone
7
requests
7
whoogle-search
6
apache-iotdb
6
indico
6
Jinja2
6
yt-dlp
6
graphite-web
6
ansible-core
6
mailman
6
mage-ai
6
dtale
6
torch
6
llama-index-core
6
snowflake-connector-python
6
lxml
6
torchserve
6
omero-web
6
Moin
6
codechecker
6
OpenEXR
6
apache-airflow-providers-apache-hive
6
Mezzanine
6
tuf
6
langchain-community
5
grpcio
5
nltk
5
keylime
5
grpc
5
Werkzeug
5
langflow
5
saleor
5
lmdb
5
jupyterhub
5
pretix
5
mayan-edms
5
ait-core
5
werkzeug
5
feedparser
5
paramiko
5
python-gnupg
5
oauthenticator
5
langchain-experimental
5
bleach
5
composio-core
5
onnx
5
fschat
5
setuptools
4
protobuf
4
reportlab
4
org.apache.streampipes:streampipes-parent
4
ray
4
starlette
4
Scrapy
4
bottle
4
esphome
4
homeassistant
4
pandasai
4
nvflare
4
mitmproxy
4
markdown2
4
streampipes
4
MaterialX
4
pywasm3
4
weblate
4
Radicale
4
aws-iot-device-sdk-v2
4
keras
4
jupyterlab
4
qutebrowser
4
koji
4
jwcrypto
4
skops
4
pytorch-lightning
4
flask-cors
4
Pygments
4
frappe
4
GitPython
4
software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk
4
PyPDF2
4
FreeTAKServer-UI
4
jinja2
4
buildbot
4
indy-node
4
tripleo-heat-templates
4
Keystone
4
streamlit
4
RestrictedPython
4
django-helpdesk
4
wasmtime
4
Weblate
4
InvokeAI
4
flask
4
apache-submarine
4
httpie
4
dbt-core
4
Nova
4
Flask-Security-Too
4
awsiotsdk
4
barbican
4
ms-swift
3
plone.app.theming
3
ajenti
3