https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:47:17.829531+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2025-57735 BIT-airflow-2025-57735 — Apache Airflow: Airflow Logout Not Invalidating JWT 2026-10-06T22:47:17.833125+00:00

Affected: Bitnami: airflow

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-290286 EUVD-2026-290286 2026-10-06T22:47:17.833180+00:00 EUVD-2026-290286 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57735 fkie_cve-2025-57735 2026-10-06T22:47:17.833196+00:00

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-c92r-g8j5-vhcx GHSA-c92r-g8j5-vhcx — Apache Airflow: JWT token still valid after logout 2026-10-06T22:47:17.833221+00:00

Affected: PyPI: apache-airflow

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-269 PYSEC-2026-269 — Apache Airflow: JWT token still valid after logout 2026-10-06T22:47:17.833242+00:00

Affected: PyPI: apache-airflow

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1042 WID-SEC-W-2026-1042 — Apache Airflow: Mehrere Schwachstellen 2026-10-06T22:47:17.833261+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen und vertrauliche Informationen offenzulegen.