https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T12:06:02.125656+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2021-26697 BIT-airflow-2021-26697 — Apache Airflow: Lineage API endpoint for Experimental API missed authentication check 2026-10-18T12:06:02.134732+00:00

Affected: Bitnami: airflow

The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue affects Apache Airflow 2.0.0.

 https://cve.radiocsirt.org/vuln/cnvd-2021-18012 cnvd-2021-18012 2026-10-18T12:06:02.134893+00:00 cnvd-2021-18012 https://cve.radiocsirt.org/vuln/euvd-2026-215959 EUVD-2026-215959 2026-10-18T12:06:02.134971+00:00 EUVD-2026-215959 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26697 fkie_cve-2021-26697 2026-10-18T12:06:02.134998+00:00

The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue affects Apache Airflow 2.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-fh37-cx83-q542 GHSA-fh37-cx83-q542 — Improper Authentication in Apache Airflow 2026-10-18T12:06:02.135046+00:00

Affected: PyPI: apache-airflow

The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue only affects Apache Airflow 2.0.0.

 https://cve.radiocsirt.org/vuln/gsd-2021-26697 gsd-2021-26697 2026-10-18T12:06:02.135095+00:00 gsd-2021-26697 https://cve.radiocsirt.org/vuln/pysec-2021-3 PYSEC-2021-3 2026-10-18T12:06:02.135119+00:00

Affected: PyPI: apache-airflow

The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue affects Apache Airflow 2.0.0.