https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:25:20.501362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2024-45498 BIT-airflow-2024-45498 — Apache Airflow: Command Injection in an example DAG 2026-10-09T20:25:20.504550+00:00

Affected: Bitnami: airflow

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG trigger permission to execute arbitrary commands. If you used that example as the base of your DAGs - please review if you have not copied the dangerous example; see https://github.com/apache/airflow/pull/41873  for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example DAGs, upgrade Airflow to version 2.10.1 or later.

 https://cve.radiocsirt.org/vuln/euvd-2026-199112 EUVD-2026-199112 2026-10-09T20:25:20.504602+00:00 EUVD-2026-199112 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45498 fkie_cve-2024-45498 2026-10-09T20:25:20.504618+00:00

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG trigger permission to execute arbitrary commands. If you used that example as the base of your DAGs - please review if you have not copied the dangerous example; see https://github.com/apache/airflow/pull/41873  for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example DAGs, upgrade Airflow to version 2.10.1 or later.

 https://cve.radiocsirt.org/vuln/ghsa-c392-whpc-vfpr GHSA-c392-whpc-vfpr — Apache Airflow vulnerable to Improper Encoding or Escaping of Output 2026-10-09T20:25:20.504642+00:00

Affected: PyPI: apache-airflow

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG trigger permission to execute arbitrary commands. If you used that example as the base of your DAGs - please review if you have not copied the dangerous example; see https://github.com/apache/airflow/pull/41873  for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example DAGs, upgrade Airflow to version 2.10.1 or later.

 https://cve.radiocsirt.org/vuln/pysec-2024-266 PYSEC-2024-266 2026-10-09T20:25:20.504665+00:00

Affected: PyPI: apache-airflow

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG trigger permission to execute arbitrary commands. If you used that example as the base of your DAGs - please review if you have not copied the dangerous example; see https://github.com/apache/airflow/pull/41873  for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example DAGs, upgrade Airflow to version 2.10.1 or later.