Most recent entries from all

BIT-airflow-2022-43982 — Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL

2026-10-17T11:43:57.139468+00:00

Affected: Bitnami: airflow

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

2026-10-17T11:43:57.139526+00:00

EUVD-2026-236738

2026-10-17T11:43:57.139544+00:00

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

2026-10-17T11:43:57.139568+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

2026-10-17T11:43:57.139590+00:00

gsd-2022-43982

2026-10-17T11:43:57.139602+00:00

Affected: PyPI: apache-airflow

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.