https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:29:47.906510+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01276 bdu:2024-01276 2026-10-08T21:29:47.998294+00:00 bdu:2024-01276 https://cve.radiocsirt.org/vuln/bit-airflow-2023-40611 BIT-airflow-2023-40611 — Apache Airflow Dag Runs Broken Access Control Vulnerability 2026-10-08T21:29:47.998331+00:00

Affected: Bitnami: airflow

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.

Users should upgrade to version 2.7.1 or later which has removed the vulnerability.

 https://cve.radiocsirt.org/vuln/cnvd-2023-72233 cnvd-2023-72233 2026-10-08T21:29:47.998367+00:00 cnvd-2023-72233 https://cve.radiocsirt.org/vuln/euvd-2026-245821 EUVD-2026-245821 2026-10-08T21:29:47.998382+00:00 EUVD-2026-245821 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40611 fkie_cve-2023-40611 2026-10-08T21:29:47.998392+00:00

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.

Users should upgrade to version 2.7.1 or later which has removed the vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-wpg8-mf6h-gm92 GHSA-wpg8-mf6h-gm92 — Apache Airflow Incorrect Authorization vulnerability 2026-10-08T21:29:47.998416+00:00

Affected: PyPI: apache-airflow

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.

Users should upgrade to version 2.7.1 or later which has removed the vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-40611 gsd-2023-40611 2026-10-08T21:29:47.998438+00:00 gsd-2023-40611 https://cve.radiocsirt.org/vuln/pysec-2023-170 PYSEC-2023-170 2026-10-08T21:29:47.998449+00:00

Affected: PyPI: apache-airflow

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.

Users should upgrade to version 2.7.1 or later which has removed the vulnerability.