Most recent entries from all

cnvd-2023-55392

2026-10-15T23:46:53.344924+00:00

cnvd-2023-55392

EUVD-2026-216580

2026-10-15T23:46:53.344954+00:00

EUVD-2026-216580

fkie_cve-2023-35797

2026-10-15T23:46:53.344969+00:00

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.

Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it requires access to modifying the connection details.

It is recommended updating provider version to 6.1.1 in order to avoid this vulnerability.

GHSA-hg6c-qqcm-r79r — Apache Airflow Hive Provider Beeline remote code execution with Principal

2026-10-15T23:46:53.345002+00:00

Affected: PyPI: apache-airflow-providers-apache-hive

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.

Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it requires access to modifying the connection details.

It is recommended updating provider version to 6.1.1 in order to avoid this vulnerability.

gsd-2023-35797

2026-10-15T23:46:53.345027+00:00

gsd-2023-35797

PYSEC-2026-273 — Apache Airflow Hive Provider Beeline remote code execution with Principal

2026-10-15T23:46:53.345039+00:00

Affected: PyPI: apache-airflow-providers-apache-hive

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.

Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it requires access to modifying the connection details.

It is recommended updating provider version to 6.1.1 in order to avoid this vulnerability.