https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:00:06.660597+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00598 bdu:2026-00598 2026-10-08T21:00:06.665235+00:00 bdu:2026-00598 https://cve.radiocsirt.org/vuln/bit-airflow-2025-68675 BIT-airflow-2025-68675 — Apache Airflow: proxy credentials for various providers might leak in task logs 2026-10-08T21:00:06.665268+00:00

Affected: Bitnami: airflow

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs, proxy credentials embedded in these fields could be exposed.

Users are recommended to upgrade to 3.1.6 or later for Airflow 3, and 2.11.1 or later for Airflow 2 which fixes this issue

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0500 certfr-2026-avi-0500 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-08T21:00:06.665305+00:00 certfr-2026-avi-0500 https://cve.radiocsirt.org/vuln/euvd-2026-270009 EUVD-2026-270009 2026-10-08T21:00:06.665323+00:00 EUVD-2026-270009 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68675 fkie_cve-2025-68675 2026-10-08T21:00:06.665335+00:00

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs, proxy credentials embedded in these fields could be exposed.

Users are recommended to upgrade to 3.1.6 or later for Airflow 3, and 2.11.1 or later for Airflow 2 which fixes this issue

 https://cve.radiocsirt.org/vuln/ghsa-7c2f-r6gc-h92h GHSA-7c2f-r6gc-h92h — Apache Airflow proxy credentials for various providers might leak in task logs 2026-10-08T21:00:06.665359+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs, proxy credentials embedded in these fields could be exposed.

Users are recommended to upgrade to 3.1.6 or later for Airflow 3, and 2.11.1 or later for Airflow 2 which fixes this issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-10 PYSEC-2026-10 2026-10-08T21:00:06.665383+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs, proxy credentials embedded in these fields could be exposed.

Users are recommended to upgrade to 3.1.6 or later for Airflow 3, and 2.11.1 or later for Airflow 2 which fixes this issue