https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:57:45.630666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05809 bdu:2023-05809 2026-10-08T18:57:45.634830+00:00 bdu:2023-05809 https://cve.radiocsirt.org/vuln/cnvd-2023-85613 cnvd-2023-85613 2026-10-08T18:57:45.634862+00:00 cnvd-2023-85613 https://cve.radiocsirt.org/vuln/euvd-2026-216789 EUVD-2026-216789 2026-10-08T18:57:45.634877+00:00 EUVD-2026-216789 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41267 fkie_cve-2023-41267 2026-10-08T18:57:45.634889+00:00

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1

 https://cve.radiocsirt.org/vuln/ghsa-5hj9-m76g-xrc8 GHSA-5hj9-m76g-xrc8 — Apache HDFS Provider error message suggested 2026-10-08T18:57:45.634918+00:00

Affected: PyPI: apache-airflow-providers-apache-hdfs

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1

 https://cve.radiocsirt.org/vuln/gsd-2023-41267 gsd-2023-41267 2026-10-08T18:57:45.634942+00:00 gsd-2023-41267 https://cve.radiocsirt.org/vuln/pysec-2026-1138 PYSEC-2026-1138 — Apache HDFS Provider error message suggested 2026-10-08T18:57:45.634953+00:00

Affected: PyPI: apache-airflow-providers-apache-hdfs

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1