Apache: >> Airflow >> 2.5.0 Security Vulnerabilities
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-05-08
Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.
CVSS Score
5.3
EPSS Score
0.003
Published
2023-03-15
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.
CVSS Score
9.8
EPSS Score
0.639
Published
2023-01-21
Page 4