Vulnerabilities for apache-airflow-providers-fab

First version without a known vulnerability: 3.6.4

Details

• GHSA-g283-w6fp-c4fc2026-05-26

  Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability

  Fixed in: 3.6.4

• GHSA-8863-4qmg-fr452025-01-08

  Apache Airflow Fab Provider Insufficient Session Expiration vulnerability

  Fixed in: 1.5.2

• GHSA-62qf-qm3g-fvcw2024-08-05

  Apache Airflow Providers FAB Insufficient Session Expiration vulnerability

  Fixed in: 1.2.2