apache-airflow-core
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args | apache-airflow-core | PyPI | High | Fix reported | |
| Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries | apache-airflow-coreapache-airflow | PyPI | Low | Fix reported | |
| Apache Airflow allows code execution through crafted XCom payloads | apache-airflow-coreapache-airflow | PyPI | High | Fix reported | |
| Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false | apache-airflow-coreapache-airflow | PyPI | Medium | Fix reported | |
| Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their permissions | apache-airflow-core | PyPI | High | Fix reported |