Vulnerabilities for apache-airflow

First version without a known vulnerability: 3.4.0b1

Details

• PYSEC-2026-39902026-09-21

  Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, the endpoint returns its normal logout response but revokes nothing, so the token remains valid until it expires. An attacker who already holds a copy of that token keeps the victim's access after the victim has logged out and believes the session ended; the default token lifetime is 24 hours and is configurable.

  Fixed in: 3.3.2

• PYSEC-2026-39892026-09-21

  When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie and ignores the bearer token, inverting the intended precedence of bearer over cookie. The request then executes -- and is recorded in the audit log -- as the cookie's principal rather than the identity the client explicitly presented.

• PYSEC-2026-39882026-09-21

  Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID, run ID and event timestamps — for Dags they have no permission to see. Because the filter was also absent from the count query, `total_entries` and pagination disclosed the existence of hidden Dags even without inspecting individual rows. Deployments are affected whenever per-Dag access control is used to separate teams or tenants; no special configuration is required. Upgrade to apache-airflow 3.3.2 or later.

  Fixed in: 3.3.2

• GHSA-5247-m8w9-2v4m2026-08-12

  Apache Airflow missing team context permits cross-team Dag actions and XCom reads

  Fixed in: 3.3.1

• GHSA-cjv4-7hp2-2x9h2026-08-12

  Apache Airflow bulk endpoints log Variable and Connection secrets in cleartext

  Fixed in: 3.3.1

• GHSA-f3c2-j7g8-vpp82026-08-12

  Apache Airflow Task SDK fails to mask list-shaped JSON Variables

  Fixed in: 3.3.1

• GHSA-2qjv-p2gc-mjg22026-08-12

  Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler

  Fixed in: 3.3.1

• GHSA-75mg-c62r-v95g2026-08-12

  Apache Airflow environment-variable secrets backend permits cross-team credential use

  Fixed in: 3.3.1

• GHSA-c56v-8w4g-3mfm2026-08-12

  Apache Airflow Config API exposes team-scoped sensitive configuration values

  Fixed in: 3.3.1

• GHSA-fcmm-42r9-mmmm2026-08-12

  Apache Airflow XCom API permits unsafe deserialization through JSON string literals

  Fixed in: 3.3.1

• GHSA-g4qj-5vxv-wggf2026-08-12

  Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables

  Fixed in: 3.3.1

• GHSA-j4jc-cq9h-xrhr2026-08-12

  Apache Airflow Backfill API parser discrepancy permits cross-DAG authorization bypass

  Fixed in: 3.3.1

• GHSA-q4c3-7575-55j22026-08-12

  Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs

  Fixed in: 3.3.1

• GHSA-8prw-8m6x-8w6f2026-08-12

  Apache Airflow exception-node deserialization permits arbitrary callable execution

  Fixed in: 3.3.1

• GHSA-f643-3rc2-j27w2026-08-12

  Apache Airflow exposes dict-valued var.json secrets in Rendered Templates

  Fixed in: 3.3.1

• PYSEC-2026-23532026-07-13

  Apache Airflow: RCE by race condition in example_xcom dag

  Fixed in: 3.2.0

• GHSA-22hf-vx2v-gjff2026-07-07

  Apache Airflow exposes deferred trigger kwargs in task-instance API responses

  Fixed in: 3.3.0

• GHSA-4fh7-7jx4-8f6c2026-07-07

  apache-airflow DAG source authorization bypass exposes co-located DAG source

  Fixed in: 3.3.0

• GHSA-2943-9672-r45w2026-07-07

  Apache Airflow allows code execution through unsafe serialized DAG deserialization

  Fixed in: 3.3.0

• GHSA-3322-mjxh-9mp52026-07-07

  Apache Airflow exposes unreadable DAG identifiers in the scheduling dependencies graph

  Fixed in: 3.3.0

• GHSA-563f-2439-rmq42026-07-07

  Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API

  Fixed in: 3.3.0

• GHSA-9933-5rrp-mfwx2026-07-07

  Apache Airflow exposes secrets backend credentials through the Config API

  Fixed in: 3.3.0

• GHSA-799x-qp47-8qwq2026-06-01

  Apache Airflow has no certificate validation on SMTP STARTTLS connections

  Fixed in: 3.2.2

• GHSA-qphr-3mvq-v4662026-06-01

  Apache Airflow has an Authorization Bypass Through User-Controlled Key

  Fixed in: 3.2.2

• GHSA-vr7m-c6v4-8cx82026-06-01

  Apache Airflow: Auth manager doesn't invalidate JWT tokens after users click logout

  Fixed in: 3.2.2

• GHSA-2r5m-76wx-56gx2026-06-01

  Apache Airflow Vulnerable to Deserialization of Untrusted Data

  Fixed in: 3.2.2

• GHSA-33g2-gx67-c2h32026-06-01

  Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

  Fixed in: 3.2.2

• GHSA-c85c-g9wv-pph22026-06-01

  Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

  Fixed in: 3.2.2

• GHSA-cg3x-89rc-x9mw2026-06-01

  Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

  Fixed in: 3.2.2

• GHSA-mxq5-f9c5-w4p52026-06-01

  Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key

  Fixed in: 3.2.2

• GHSA-wr76-29cr-67w82026-06-01

  Apache Airflow has a Deserialization of Untrusted Data vulnerability

  Fixed in: 3.2.2

• GHSA-x5wm-j6wh-28342026-06-01

  Apache Airflow has an Incorrect Authorization issue

  Fixed in: 3.2.2

• GHSA-6hcw-qqr8-pjj82026-06-01

  Apache Airflow: Authenticated users can bypass the `is_safe_url` check

  Fixed in: 3.2.2

• GHSA-89cj-xrpx-j79m2026-06-01

  Apache Airflow has a Link Following issue

  Fixed in: 3.2.2

• GHSA-95v7-h9j5-gvjr2026-06-01

  Apache Airflow has a Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

  Fixed in: 3.2.2

• GHSA-gprj-xvq8-w53q2026-06-01

  Apache Airflow has an Improper Authorization issue

  Fixed in: 3.2.2

• GHSA-x2x7-p37c-43cr2026-06-01

  Apache Airflow has a Missing Authorization issue

  Fixed in: 3.2.2

• GHSA-2883-wwh7-x57v2026-06-01

  Apache Airflow: Incomplete redaction allowlist exposes secrets in Connection `extra`  to read-permitted users

  Fixed in: 3.2.2

• GHSA-p3v3-229h-mc632026-04-24

  Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record

  Fixed in: 3.2.1rc1

• GHSA-w7rc-q6cm-f5gm2026-04-24

  Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

  Fixed in: 3.2.1rc1

• GHSA-w9r4-94fj-xp692026-04-18

  Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries

  Fixed in: 3.2.0

• PYSEC-2026-182026-04-18

  In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

  Fixed in: 3.2.0

• PYSEC-2026-132026-04-18

  Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.

  Fixed in: 3.2.0

• GHSA-phv5-vq5p-qhp72026-04-16

  Apache Airflow: JWT token appearing in logs

  Fixed in: 3.2.0

• GHSA-4g48-54q2-fg7q2026-04-15

  Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

  Fixed in: 3.1.8

• GHSA-mc4f-r875-v87w2026-04-13

  Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API

  Fixed in: 3.2.0

• GHSA-j86x-fwp2-qh7v2026-04-13

  Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI

  Fixed in: 3.2.0

• GHSA-c92r-g8j5-vhcx2026-04-09

  Apache Airflow: JWT token still valid after logout

  Fixed in: 3.2.0

• GHSA-r7vr-m4jw-r7942026-04-09

  Apache Airflow has an authorization bypass in DagRun wait endpoint

  Fixed in: 3.2.0

• GHSA-wrpj-755p-x3632026-03-31

  Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange

  Fixed in: 1.12.0

• GHSA-4fhm-p86v-hwpx2026-03-17

  Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

  Fixed in: 3.1.8

• GHSA-8x34-9q3v-h7g82026-03-17

  Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

  Fixed in: 3.1.8

• GHSA-x3fv-96qh-67m72026-03-17

  Apache Airflow: DAG authorization bypass

  Fixed in: 3.1.8

• GHSA-4m3h-wp5w-5hqh2026-03-17

  Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

  Fixed in: 3.1.8

• GHSA-8r55-rv5w-6pfm2026-02-24

  Apache Airflow exposes sensitive information in its log files

  Fixed in: 2.11.1

• GHSA-r837-hpv7-pc2f2026-02-24

  Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table

  Fixed in: 2.11.1

• GHSA-gfw7-2v73-69wg2026-02-21

  Apache Airflow error reporting may expose full kwargs

  Fixed in: 2.11.1, 3.1.5rc1

• GHSA-5g2w-9f8g-g5q72026-02-09

  Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users

  Fixed in: 3.1.7

• GHSA-pm44-x5x7-24c42026-02-09

  Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access

  Fixed in: 3.1.7

• GHSA-3qmm-r55x-hpxx2026-01-16

  Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated

  Fixed in: 3.1.6

• GHSA-7c2f-r6gc-h92h2026-01-16

  Apache Airflow proxy credentials for various providers might leak in task logs

  Fixed in: 3.1.6, 2.11.1

• PYSEC-2025-872025-12-17

  Edge3 Worker RPC RCE on Airflow 2.

  Fixed in: 2.0.0

• GHSA-fv47-pqh6-wxgq2025-12-15

  Apache Airflow exposes secret values to authenticated UI users via rendered templates

  Fixed in: 3.1.5, 3.1.4

• GHSA-273c-4g26-4jpm2025-10-30

  Apache Airflow `/api/v2/dagReports` executes DAG Python in API

  Fixed in: 3.1.1

• GHSA-gp5f-cx7h-8q6f2025-10-30

  Apache Airflow's create action can upsert existing Pools/Connections/Variables

  Fixed in: 3.1.1

• GHSA-v3c9-j6h9-66v42025-10-30

  Apache Airflow has a command injection vulnerability in "example_dag_decorator"

  Fixed in: 3.0.5

• GHSA-q475-2pgm-7hvp2025-09-26

  Apache Airflow: Connection sensitive details exposed to users with READ permissions

  Fixed in: 3.0.4

• PYSEC-2024-1822024-11-15

  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets.

  Fixed in: 2.10.3

• GHSA-j857-2pwm-jjmm2024-11-08

  Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data

  Fixed in: 2.10.3

• GHSA-92xg-gmrq-5c3w2024-09-07

  Apache Airflow vulnerable to Execution with Unnecessary Privileges

  Fixed in: 2.10.1

• GHSA-c392-whpc-vfpr2024-09-07

  Apache Airflow vulnerable to Improper Encoding or Escaping of Output

  Fixed in: 2.10.1

• GHSA-w7cp-g8v7-r54m2024-08-21

  Apache Airflow Cross-site Scripting Vulnerability

  Fixed in: 2.10.0

• PYSEC-2024-2652024-08-05

  Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB.

• GHSA-g5hv-r743-v8pm2024-07-17

  Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler

  Fixed in: 2.9.3

• GHSA-j482-47xf-p25c2024-07-17

  Apache Airflow Potential Cross-site Scripting Vulnerability

  Fixed in: 2.9.3

• GHSA-9xpj-62mm-24h22024-06-14

  Apache Airflow does not return the "Cache-Control" header for dynamic content

  Fixed in: 2.9.2

• GHSA-52gm-qmg3-r4qp2024-05-14

  Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

  Fixed in: 2.9.1

• GHSA-2522-mrjc-m6882024-04-18

  Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used

  Fixed in: 2.9.0

• GHSA-cff3-5qrp-hqx72024-03-26

  Apache Airflow Improper Preservation of Permissions vulnerability

  Fixed in: 2.8.4

• GHSA-h574-6646-vfxx2024-03-14

  Apache Airflow: Ignored Airflow Permission

  Fixed in: 2.8.3rc1

• GHSA-6xwf-xvf3-v4592024-03-01

  Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users

  Fixed in: 2.8.2

• GHSA-6v6w-h8m6-7mv22024-02-29

  Apache Airflow: DAG Code and Import Error Permissions Ignored

  Fixed in: 2.8.2

• GHSA-c3c6-f2ww-xfr22024-01-24

  Apache Airflow: pickle deserialization vulnerability in XComs

  Fixed in: 2.8.1rc1, 2.8.1

• GHSA-mg2x-mggj-69552024-01-24

  Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

  Fixed in: 2.6.1, 7.0.0

• GHSA-vm5m-qmrx-fw8w2024-01-24

  Apache Airflow: Bypass permission verification to read code of other dags

  Fixed in: 2.8.1rc1, 2.8.1

• GHSA-5938-79hg-xh3q2023-12-21

  Apache Airflow Improper Access Control vulnerability

  Fixed in: 2.8.0

• GHSA-6m9r-7wrx-xmr62023-12-21

  Apache Airflow Cross-Site Request Forgery vulnerability

  Fixed in: 2.8.0, 2.8.0b1

• GHSA-8f57-wcmg-4jmh2023-12-21

  Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

  Fixed in: 2.8.0

• GHSA-pxch-wr7m-rwxj2023-12-21

  Apache Airflow has a stored cross-site scripting vulnerability

  Fixed in: 2.8.0b1

• GHSA-hm9r-7f84-25c92023-11-12

  Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes

  Fixed in: 2.7.3

• GHSA-r7x6-xfcm-3mxv2023-11-12

  Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

  Fixed in: 2.7.3

• GHSA-666g-rfc5-c9jv2023-10-28

  Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

  Fixed in: 3.4.1, 2.7.0

• GHSA-9qqg-mh7c-chfq2023-10-23

  Apache Airflow vulnerable to Exposure of Sensitive Information

  Fixed in: 2.7.2, 2.7.0

• GHSA-32wr-qqw6-5mfp2023-10-14

  Apache Airflow vulnerable to sensitive information exposure

  Fixed in: 2.7.2

• GHSA-cgx2-rrmr-jx432023-10-14

  Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs

  Fixed in: 2.7.2

• GHSA-fpxx-xv4c-gxqp2023-10-14

  Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only

  Fixed in: 2.7.2

• GHSA-j3w8-2p2h-mrr92023-10-14

  Apache Airflow vulnerable to privilege escalation

  Fixed in: 2.7.2

• GHSA-mjqh-v5f2-g2mw2023-09-12

  Apache Airflow information exposure vulnerability

  Fixed in: 2.7.1

• GHSA-wpg8-mf6h-gm922023-09-12

  Apache Airflow Incorrect Authorization vulnerability

  Fixed in: 2.7.1

• GHSA-5f35-pq34-c87q2023-08-23

  Apache Airflow missing Certificate Validation

  Fixed in: 1.3.0, 3.3.0, 2.7.0

• GHSA-pm87-24wq-r8w92023-08-23

  Apache Airflow Session Fixation vulnerability

  Fixed in: 2.7.0rc2, 2.7.1rc1

• GHSA-x2mh-8fmc-rqgh2023-08-23

  Apache Airflow denial of service vulnerability

  Fixed in: 2.7.0b1, 2.7.0

• PYSEC-2023-1362023-08-11

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.

  Fixed in: 2.4.3

• GHSA-269x-pg5c-5xgm2023-08-05

  Apache Airflow Execution with Unnecessary Privileges

  Fixed in: 2.6.0b1, 2.6.0

• GHSA-2h84-3crq-vgfj2023-07-12

  Apache Airflow Incorrect Authorization vulnerability

  Fixed in: 2.6.3

• GHSA-3h4m-m55v-gx4m2023-07-12

  Apache Airflow Improper Input Validation vulnerability

  Fixed in: 2.6.3

• GHSA-5946-8p38-vffp2023-07-12

  Apache Airflow Improper Input Validation vulnerability

  Fixed in: 2.6.3

• GHSA-ggwr-4vr8-g7wv2023-07-12

  Apache Airflow Path Traversal vulnerability

  Fixed in: 2.6.3

• GHSA-xvw9-3mhm-xjqq2023-07-12

  Apache Airflow information disclosure vulnerability

  Fixed in: 2.6.3

• GHSA-mjff-wv85-hmcj2023-06-19

  Apache Airflow vulnerable to exposure of sensitive information

  Fixed in: 2.6.2rc1, 2.6.2

• GHSA-jchm-fm4q-c2fp2023-05-08

  Apache Airflow vulnerable to Privilege Context Switching Error

  Fixed in: 2.6.0b1, 2.6.0

• GHSA-vcf6-3wv2-5vcr2023-05-08

  Apache Airflow vulnerable to stored Cross-site Scripting

  Fixed in: 2.6.0

• PYSEC-2023-32023-04-07

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.

  Fixed in: 2.3.2

• GHSA-h6g5-wqqr-3mw32023-03-15

  Sensitive Information in Error Messages in Apache Airflow

  Fixed in: 2.5.2rc1, 2.5.2

• PYSEC-2023-3142023-02-24

  Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.

  Fixed in: 3.1.1

• GHSA-c732-xvv8-g94c2023-01-21

  Command Injection in Apache Airflow and Apache Airflow MySQL Provider

  Fixed in: 2.5.1, 4.0.0

• GHSA-45r6-j3cc-6mxx2022-11-22

  OS Command Injection in Apache Airflow

  Fixed in: 2.3.0

• GHSA-7wqf-h36w-47mc2022-11-22

  OS Command Injection in Apache Airflow

  Fixed in: 2.3.0

• GHSA-rmf2-pwfq-h75j2022-11-22

  OS Command Injection in Apache Airflow

  Fixed in: 2.3.0

• GHSA-rg94-84xj-7gq32022-11-15

  Apache Airflow Contains Open Redirect

  Fixed in: 2.4.3

• GHSA-6pw3-8h9w-32gc2022-11-14

  Apache Airflow vulnerable to OS Command Injection via example DAGs

  Fixed in: 2.4.0

• GHSA-fvw2-2pf7-77vw2022-11-14

  Apache Airflow subject to Exposure of Sensitive Information

  Fixed in: 2.3.1

• GHSA-h63r-9xxf-f2c72022-11-02

  Apache Airflow Cross-site Scripting vulnerability

  Fixed in: 2.4.2rc1, 2.4.2

• GHSA-f9fq-78ch-4wmj2022-11-02

  Apache Airflow Open Redirect vulnerability

  Fixed in: 2.4.2rc1, 2.4.2

• GHSA-3q8r-f3pj-3gc42022-10-07

  Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API

  Fixed in: 2.4.1rc1, 2.4.2rc1

• GHSA-5rp4-749p-vx262022-09-22

  Apache Airflow vulnerable to Use of Externally-Controlled Format String

  Fixed in: 2.4.0rc1, 2.4.0b1

• GHSA-4fg5-j4mm-wfpg2022-09-22

  Apache Airflow contains open redirect

  Fixed in: 2.4.0rc1, 2.4.0b1

• GHSA-5ff8-7639-6v6g2022-09-03

  Apache Airflow Session Fixation vulnerability

  Fixed in: 2.3.4rc1

• GHSA-q8h9-pqcx-59hw2022-09-03

  Apache Airflow exposes arbitrary file content

  Fixed in: 2.3.4

• GHSA-h88f-r7cw-8fv32022-05-24

  Missing Authentication for Critical Function in Apache Airflow

  Fixed in: 2.1.3

• GHSA-rv25-9wgj-xg752022-05-14

  Apache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint

  Fixed in: 1.9.0

• GHSA-65xw-pcqw-hjrh2022-02-26

  Apache Airflow Cross-site Scripting Vulnerability

  Fixed in: 2.2.4rc1

• GHSA-3v7g-4pg3-7r6j2022-02-26

  OS Command injection in Apache Airflow

  Fixed in: 2.2.4

• GHSA-4jh2-3c85-q67h2022-01-28

  Improper Privilege Management in apache-airflow

  Fixed in: 2.2.0, 2.0.0b1

• GHSA-m6h2-jx9v-58w62021-08-30

  Missing Authorization in Apache Airflow

  Fixed in: 2.1.2

• GHSA-3xxv-p78r-4fc62021-06-18

  Cross-site Scripting in Apache Airflow

  Fixed in: 1.10.15, 2.0.2

• GHSA-fh37-cx83-q5422021-06-18

  Improper Authentication in Apache Airflow

  Fixed in: 2.0.1rc1, 2.0.1

• GHSA-4pwq-fj89-6rjc2021-06-18

  Apache Airflow Cross-site Scripting

  Fixed in: 1.10.12

• GHSA-hhx9-p69v-cx2j2021-04-30

  Authentication bypass in Apache Airflow

  Fixed in: 1.10.11

• GHSA-7mx5-x372-xh872021-04-20

  Incorrect Session Validation in Apache Airflow

  Fixed in: 1.10.14

• GHSA-86vp-x3pr-79rx2021-04-20

  Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944

  Fixed in: 1.10.15rc1, 2.0.2rc1, 1.10.13

• GHSA-ffw3-6mp6-jmvj2021-04-07

  Improper Access Control in Apache Airflow

  Fixed in: 2.0.1rc1, 2.0.1

• GHSA-6r3p-fcvm-xh7c2020-12-17

  SSRF vulnerability in Apache Airflow

  Fixed in: 1.10.13

• GHSA-cvcq-gmc3-q6m82020-12-17

  Apache Airflow logs passwords in plaintext

  Fixed in: 1.10.13

• GHSA-j38c-25fj-mr842020-07-27

  Stored XSS in Apache Airflow

  Fixed in: 1.10.11, 1.10.11rc1

• GHSA-976r-qfjj-c24w2020-07-27

  Command injection via Celery broker in Apache Airflow

  Fixed in: 1.10.11rc1

• GHSA-9g2w-5f3v-mfmm2020-07-27

  Insecure default config of Celery worker in Apache Airflow

  Fixed in: 1.10.11, 1.10.11rc1

• GHSA-rvmq-4x66-q7j32020-07-27

  Remote code execution (RCE) in Apache Airflow

  Fixed in: 1.10.11rc1

• GHSA-q4p3-qw5c-mhpc2020-07-27

  Multiple stored XSS in RBAC Admin screens in Apache Airflow

  Fixed in: 1.10.11, 1.10.11rc1

• GHSA-rjvg-q57v-mjjc2020-05-06

  XSS in Apache Airflow

  Fixed in: 1.10.5

• PYSEC-2019-2162019-10-30

  A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

  Fixed in: 1.10.6rc1

• GHSA-w6j4-3gh2-9f5j2019-04-18

  Apache Airflow vulnerable to CSRF Attacks

  Fixed in: 1.10.3, 1.10.3b1

• GHSA-8p7v-2jvj-v54r2019-04-12

  Apache Airflow vulnerable to Stored XSS

  Fixed in: 1.10.3, 1.10.3b1

• GHSA-99cv-8cvv-666c2019-03-06

  Apache Airflow vulnerable to Stored XSS

  Fixed in: 1.10.2

• GHSA-77rc-x84q-pv4f2019-01-25

  Improper Certificate Validation in Apache Airflow

  Fixed in: 1.10.1

• GHSA-68wv-rjrm-576p2019-01-25

  Cross-Site Request Forgery (CSRF) in Apache Airflow

  Fixed in: 1.9.0

• GHSA-9gqg-3fxr-9hv72019-01-25

  Apache Airflow vulnerable to XSS

  Fixed in: 1.9.0

• GHSA-8fg4-j562-mjrc2019-01-25

  Improper Input Validation in Apache Airflow resulting in Remote Code Execution

  Fixed in: 1.9.0