https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:32:52.163055+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-55394 cnvd-2023-55394 2026-10-09T18:32:52.167841+00:00 cnvd-2023-55394 https://cve.radiocsirt.org/vuln/euvd-2026-193644 EUVD-2026-193644 2026-10-09T18:32:52.167881+00:00 EUVD-2026-193644 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34395 fkie_cve-2023-34395 2026-10-09T18:32:52.167895+00:00

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of arbitrary dynamic-link libraries, resulting in command execution. Starting version 4.0.0 driver can be set only from the hook constructor. This issue affects Apache Airflow ODBC Provider: before 4.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-9766-v29c-4vm7 GHSA-9766-v29c-4vm7 — Apache Airflow ODBC Provider Argument Injection vulnerability 2026-10-09T18:32:52.167929+00:00

Affected: PyPI: apache-airflow-providers-odbc

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of arbitrary dynamic-link libraries, resulting in command execution. Starting version 4.0.0 driver can be set only from the hook constructor. This issue affects Apache Airflow ODBC Provider: before 4.0.0.

 https://cve.radiocsirt.org/vuln/gsd-2023-34395 gsd-2023-34395 2026-10-09T18:32:52.167956+00:00 gsd-2023-34395 https://cve.radiocsirt.org/vuln/pysec-2026-1152 PYSEC-2026-1152 — Apache Airflow ODBC Provider Argument Injection vulnerability 2026-10-09T18:32:52.167968+00:00

Affected: PyPI: apache-airflow-providers-odbc

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of arbitrary dynamic-link libraries, resulting in command execution. Starting version 4.0.0 driver can be set only from the hook constructor. This issue affects Apache Airflow ODBC Provider: before 4.0.0.