https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:29:14.676342+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2024-32077 BIT-airflow-2024-32077 — Apache Airflow: XSS vulnerability in Task Instance Log/Log Details 2026-10-07T18:29:14.680604+00:00

Affected: Bitnami: airflow

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/cnvd-2024-26529 cnvd-2024-26529 2026-10-07T18:29:14.680657+00:00 cnvd-2024-26529 https://cve.radiocsirt.org/vuln/euvd-2026-225816 EUVD-2026-225816 2026-10-07T18:29:14.680676+00:00 EUVD-2026-225816 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32077 fkie_cve-2024-32077 2026-10-07T18:29:14.680688+00:00

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-52gm-qmg3-r4qp GHSA-52gm-qmg3-r4qp — Apache Airflow: XSS vulnerability in Task Instance Log/Log Details 2026-10-07T18:29:14.680710+00:00

Affected: PyPI: apache-airflow

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-32077 gsd-2024-32077 2026-10-07T18:29:14.680729+00:00 gsd-2024-32077 https://cve.radiocsirt.org/vuln/pysec-2024-264 PYSEC-2024-264 2026-10-07T18:29:14.680740+00:00

Affected: PyPI: apache-airflow

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.