← All credits
Apache Airflow PMC wants to thank id_No2015429 of 3H Security Team for reporting the issue.
4 vulnerability records and advisories credit this contributor.
CVE-2022-41131
Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)
CVE-2022-40954
Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files
CVE-2022-40189
Apache Airlfow Pig Provider RCE
CVE-2022-38649
Apache Airflow Pinot provider allowed Command Injection