Vulnerabilities for apache-airflow-providers-cncf-kubernetes

First version without a known vulnerability: 10.17.0

Details

• GHSA-524w-vq63-2xhf2026-05-19

  Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments

  Fixed in: 10.17.0

• GHSA-mg2x-mggj-69552024-01-24

  Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

  Fixed in: 2.6.1, 7.0.0

• GHSA-2rx4-9f5h-9gjf2023-07-06

  Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration

  Fixed in: 7.0.0