https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T14:15:25.789216+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-28710 CVE-2023-28710 — Apache Airflow Spark Provider Arbitrary File Read via JDBC 2026-10-17T14:15:25.839112+00:00

Affected: Apache Software Foundation Apache Airflow Spark Provider, apache-airflow-providers-apache-spark

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

 https://cve.radiocsirt.org/vuln/pysec-2026-1140 PYSEC-2026-1140 — Apache Airflow Spark Provider vulnerable to improper input validation 2026-10-17T14:15:25.839176+00:00

Affected: PyPI: apache-airflow-providers-apache-spark

Apache Software Foundation Apache Airflow Spark Provider before 4.0.1 is vulnerable to improper input validation because the host and schema of JDBC Hook can contain `/` and `?` which is used to denote the end of the field.