Apache Airflow vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

3 matching records

High8.8Apache Airflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2022-24288 · apache · airflow · CVE.org · FIRST EPSS · Monitored products — high · Airflow, ApachePatch nowKEVEPSS 77.88%Feb 25, 2022
Critical9.8Apache Airflow's Experimental API Authentication BypassVuln · CVE-2020-13927 · apache · airflow · CISA KEV · CVE.org · FIRST EPSS · Airflow, ApachePatch nowKEVEPSS 99.78%Nov 10, 2020
High8.8Apache Airflow Command InjectionVuln · CVE-2020-11978 · apache · airflow · CISA KEV · CVE.org · FIRST EPSS · Airflow, ApachePatch nowKEVEPSS 99.19%Jul 16, 2020

Sort