~ / search / GHSA-2h84-3crq-vgfj

GHSA-2h84-3crq-vgfj

Apache Airflow Incorrect Authorization vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-35908

Packages

EcosystemPackageAffectedFixed in
PyPI apache-airflow < 2.6.3 2.6.3

Details

As written in the advisory (Markdown source, shown as plain text).

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected

References

External links from the advisory. They lead to third-party sites.