https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T19:59:35.843898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2021-45230 BIT-airflow-2021-45230 — Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver 2026-10-18T19:59:35.848294+00:00

Affected: Bitnami: airflow

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.

 https://cve.radiocsirt.org/vuln/cnvd-2022-08280 cnvd-2022-08280 2026-10-18T19:59:35.848345+00:00 cnvd-2022-08280 https://cve.radiocsirt.org/vuln/euvd-2026-33243 EUVD-2026-33243 2026-10-18T19:59:35.848363+00:00 EUVD-2026-33243 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45230 fkie_cve-2021-45230 2026-10-18T19:59:35.848374+00:00

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.

 https://cve.radiocsirt.org/vuln/ghsa-4jh2-3c85-q67h GHSA-4jh2-3c85-q67h — Improper Privilege Management in apache-airflow 2026-10-18T19:59:35.848395+00:00

Affected: PyPI: apache-airflow

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.

 https://cve.radiocsirt.org/vuln/gsd-2021-45230 gsd-2021-45230 2026-10-18T19:59:35.848415+00:00 gsd-2021-45230 https://cve.radiocsirt.org/vuln/pysec-2022-11 PYSEC-2022-11 2026-10-18T19:59:35.848426+00:00

Affected: PyPI: apache-airflow

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.