Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3986
  • PyPI/apache-airflow-providers-apache-kafka
See record for full details 3 days ago
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-3806
  • PyPI/apache-airflow
Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API 10 Sep
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3712
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3711
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3710
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-3709
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 5.4 (Medium)
PYSEC-2026-3708
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-3707
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 7.3 (High)
PYSEC-2026-3706
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3705
  • PyPI/apache-airflow
See record for full details 12 Aug
  • Fix available
  • Severity - 4.3 (Medium)
PYSEC-2026-3714
  • PyPI/apache-airflow-providers-google
See record for full details 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3713
  • PyPI/apache-airflow-providers-amazon
See record for full details 10 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3715
  • PyPI/apache-airflow-providers-yandex
See record for full details 10 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2354
  • PyPI/apache-airflow
Apache Airflow has an Authorization Bypass Through User-Controlled Key 13 Jul
  • Fix available
  • Severity - 4.3 (Medium)
PYSEC-2026-2358
  • PyPI/apache-airflow-core
Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args 13 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-2346
  • PyPI/apache-airflow
Apache Airflow has no certificate validation on SMTP STARTTLS connections 13 Jul
  • Fix available
  • Severity - 5.9 (Medium)