https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:14:00.232458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05292 bdu:2024-05292 2026-10-03T08:14:00.318327+00:00 bdu:2024-05292 https://cve.radiocsirt.org/vuln/bit-airflow-2024-39877 BIT-airflow-2024-39877 — Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler 2026-10-03T08:14:00.318363+00:00

Affected: Bitnami: airflow

Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability.

 https://cve.radiocsirt.org/vuln/cnvd-2024-33592 cnvd-2024-33592 2026-10-03T08:14:00.318397+00:00 cnvd-2024-33592 https://cve.radiocsirt.org/vuln/euvd-2026-163232 EUVD-2026-163232 2026-10-03T08:14:00.318411+00:00 EUVD-2026-163232 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39877 fkie_cve-2024-39877 2026-10-03T08:14:00.318421+00:00

Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-g5hv-r743-v8pm GHSA-g5hv-r743-v8pm — Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler 2026-10-03T08:14:00.318442+00:00

Affected: PyPI: apache-airflow

Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability.

 https://cve.radiocsirt.org/vuln/pysec-2024-190 PYSEC-2024-190 2026-10-03T08:14:00.318461+00:00

Affected: PyPI: apache-airflow

Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability.