https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:08:04.730403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-42781 CVE-2023-42781 — Apache Airflow: Permission verification bypass allows viewing dagruns of other dags 2026-10-05T23:08:04.765215+00:00

Affected: Apache Software Foundation Apache Airflow

Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.  This is a different issue than CVE-2023-42663 but leading to similar outcome. Users of Apache Airflow are advised to upgrade to version 2.7.3 or newer to mitigate the risk associated with this vulnerability.

 https://cve.radiocsirt.org/vuln/pysec-2023-231 PYSEC-2023-231 2026-10-05T23:08:04.765277+00:00

Affected: PyPI: apache-airflow

Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.  This is a different issue than CVE-2023-42663 but leading to similar outcome. Users of Apache Airflow are advised to upgrade to version 2.7.3 or newer to mitigate the risk associated with this vulnerability.