https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:27:58.828723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2026-30912 BIT-airflow-2026-30912 — Apache Airflow: Exposing stack trace in case of constraint error 2026-10-05T11:27:58.832921+00:00

Affected: Bitnami: airflow

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-292123 EUVD-2026-292123 2026-10-05T11:27:58.832971+00:00 EUVD-2026-292123 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30912 fkie_cve-2026-30912 2026-10-05T11:27:58.832987+00:00

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-w7cf-2pmc-5m4c GHSA-w7cf-2pmc-5m4c — Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false 2026-10-05T11:27:58.833010+00:00

Affected: PyPI: apache-airflow-core

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-18 PYSEC-2026-18 2026-10-05T11:27:58.833030+00:00

Affected: PyPI: apache-airflow

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1168 WID-SEC-W-2026-1168 — Apache Airflow und Apache Airflow Keycloak Provider: Mehrere Schwachstellen 2026-10-05T11:27:58.833048+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Airflow und dem Airflow Keycloak Provider ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.