https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:26:11.501640+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00577 bdu:2024-00577 2026-10-07T19:26:11.653961+00:00 bdu:2024-00577 https://cve.radiocsirt.org/vuln/bit-airflow-2023-49920 BIT-airflow-2023-49920 — Apache Airflow: Missing CSRF protection on DAG/trigger 2026-10-07T19:26:11.654001+00:00

Affected: Bitnami: airflow

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user's consent. Users are advised to upgrade to version 2.8.0 or later which is not affected

 https://cve.radiocsirt.org/vuln/cnvd-2024-01017 cnvd-2024-01017 2026-10-07T19:26:11.654039+00:00 cnvd-2024-01017 https://cve.radiocsirt.org/vuln/euvd-2026-216970 EUVD-2026-216970 2026-10-07T19:26:11.654054+00:00 EUVD-2026-216970 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49920 fkie_cve-2023-49920 2026-10-07T19:26:11.654066+00:00

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user's consent. Users are advised to upgrade to version 2.8.0 or later which is not affected

 https://cve.radiocsirt.org/vuln/ghsa-6m9r-7wrx-xmr6 GHSA-6m9r-7wrx-xmr6 — Apache Airflow Cross-Site Request Forgery vulnerability 2026-10-07T19:26:11.654090+00:00

Affected: PyPI: apache-airflow

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user's consent. Users are advised to upgrade to version 2.8.0 or later which is not affected

 https://cve.radiocsirt.org/vuln/gsd-2023-49920 gsd-2023-49920 2026-10-07T19:26:11.654114+00:00 gsd-2023-49920 https://cve.radiocsirt.org/vuln/pysec-2023-266 PYSEC-2023-266 2026-10-07T19:26:11.654125+00:00

Affected: PyPI: apache-airflow

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user's consent. Users are advised to upgrade to version 2.8.0 or later which is not affected