GHSA-8g23-2q5p-8866

Suggest an improvement
Source
https://github.com/advisories/GHSA-8g23-2q5p-8866
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-8g23-2q5p-8866/GHSA-8g23-2q5p-8866.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-8g23-2q5p-8866
Aliases
Published
2023-02-24T12:31:20Z
Modified
2023-11-08T04:11:54.397623Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Apache Airflow Google Provider Improper Input Validation vulnerability
Details

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

Database specific 
{
    "cwe_ids": [
        "CWE-20"
    ],
    "github_reviewed_at": "2023-02-24T16:25:46Z",
    "nvd_published_at": "2023-02-24T12:15:00Z",
    "severity": "CRITICAL",
    "github_reviewed": true
}
References

Affected packages

PyPI / apache-airflow-providers-google

Package

Name
apache-airflow-providers-google
View open source insights on deps.dev
Purl
pkg:pypi/apache-airflow-providers-google

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.10.0

Affected versions

1.*
1.0.0b1
1.0.0b2
1.0.0rc1
1.0.0
2.*
2.0.0rc1
2.0.0
2.1.0rc1
2.1.0
2.2.0rc1
2.2.0
3.*
3.0.0rc1
3.0.0
4.*
4.0.0rc1
4.0.0rc2
4.0.0
4.1.0rc1
5.*
5.0.0rc2
5.0.0
5.1.0rc1
5.1.0
6.*
6.0.0rc1
6.0.0
6.1.0rc1
6.1.0
6.2.0rc1
6.2.0
6.3.0rc1
6.3.0
6.4.0rc1
6.4.0rc2
6.4.0rc3
6.4.0
6.5.0rc1
6.5.0
6.6.0rc1
6.6.0
6.7.0rc1
6.7.0
6.8.0rc1
6.8.0
7.*
7.0.0rc1
7.0.0
8.*
8.0.0rc1
8.0.0rc2
8.0.0
8.1.0rc1
8.1.0
8.2.0rc1
8.2.0
8.3.0rc1
8.3.0rc2
8.3.0rc3
8.3.0
8.4.0rc1
8.4.0rc2
8.4.0
8.5.0rc1
8.5.0
8.6.0rc2
8.6.0rc3
8.6.0
8.7.0rc1
8.7.0rc2
8.7.0
8.8.0rc1
8.8.0
8.9.0rc1
8.9.0
8.10.0rc1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-8g23-2q5p-8866/GHSA-8g23-2q5p-8866.json"