https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T19:28:42.845395+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00683 bdu:2026-00683 2026-10-17T19:28:42.916553+00:00 bdu:2026-00683 https://cve.radiocsirt.org/vuln/bit-airflow-2025-68438 BIT-airflow-2025-68438 — Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated 2026-10-17T19:28:42.916593+00:00

Affected: Bitnami: airflow

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.

Users are recommended to upgrade to 3.1.6 or later, which fixes this issue

 https://cve.radiocsirt.org/vuln/cnvd-2026-09790 cnvd-2026-09790 2026-10-17T19:28:42.916630+00:00 cnvd-2026-09790 https://cve.radiocsirt.org/vuln/euvd-2026-265931 EUVD-2026-265931 2026-10-17T19:28:42.916645+00:00 EUVD-2026-265931 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68438 fkie_cve-2025-68438 2026-10-17T19:28:42.916656+00:00

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.

Users are recommended to upgrade to 3.1.6 or later, which fixes this issue

 https://cve.radiocsirt.org/vuln/ghsa-3qmm-r55x-hpxx GHSA-3qmm-r55x-hpxx — Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated 2026-10-17T19:28:42.916679+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.

Users are recommended to upgrade to 3.1.6 or later, which fixes this issue

 https://cve.radiocsirt.org/vuln/pysec-2026-9 PYSEC-2026-9 2026-10-17T19:28:42.916702+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.

Users are recommended to upgrade to 3.1.6 or later, which fixes this issue