https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:02:07.526166+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2022-38054 BIT-airflow-2022-38054 — Session Fixation 2026-10-08T18:02:07.549775+00:00

Affected: Bitnami: airflow

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.

 https://cve.radiocsirt.org/vuln/cnvd-2022-76236 cnvd-2022-76236 2026-10-08T18:02:07.549827+00:00 cnvd-2022-76236 https://cve.radiocsirt.org/vuln/euvd-2026-18939 EUVD-2026-18939 2026-10-08T18:02:07.549844+00:00 EUVD-2026-18939 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38054 fkie_cve-2022-38054 2026-10-08T18:02:07.549856+00:00

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.

 https://cve.radiocsirt.org/vuln/ghsa-5ff8-7639-6v6g GHSA-5ff8-7639-6v6g — Apache Airflow Session Fixation vulnerability 2026-10-08T18:02:07.549876+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.

 https://cve.radiocsirt.org/vuln/gsd-2022-38054 gsd-2022-38054 2026-10-08T18:02:07.549895+00:00 gsd-2022-38054 https://cve.radiocsirt.org/vuln/pysec-2022-263 PYSEC-2022-263 2026-10-08T18:02:07.549906+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.