https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T06:58:49.825875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-85617 cnvd-2023-85617 2026-10-17T06:58:49.928771+00:00 cnvd-2023-85617 https://cve.radiocsirt.org/vuln/euvd-2026-216733 EUVD-2026-216733 2026-10-17T06:58:49.928812+00:00 EUVD-2026-216733 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40272 fkie_cve-2023-40272 2026-10-17T06:58:49.928828+00:00

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected.

 https://cve.radiocsirt.org/vuln/ghsa-r2f6-6928-fh8f GHSA-r2f6-6928-fh8f — Apache Airflow Spark Provider Improper Input Validation vulnerability 2026-10-17T06:58:49.928860+00:00

Affected: PyPI: apache-airflow-providers-apache-spark

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected.

 https://cve.radiocsirt.org/vuln/gsd-2023-40272 gsd-2023-40272 2026-10-17T06:58:49.928884+00:00 gsd-2023-40272 https://cve.radiocsirt.org/vuln/pysec-2026-1141 PYSEC-2026-1141 — Apache Airflow Spark Provider Improper Input Validation vulnerability 2026-10-17T06:58:49.928896+00:00

Affected: PyPI: apache-airflow-providers-apache-spark

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected.