https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:06:46.696272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-35936 CVE-2021-35936 — No Authentication on Logging Server 2026-10-15T23:06:46.698264+00:00

Affected: Apache Software Foundation Apache Airflow

If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG jobs. This issue affects Apache Airflow < 2.1.2.

 https://cve.radiocsirt.org/vuln/pysec-2021-122 PYSEC-2021-122 2026-10-15T23:06:46.698315+00:00

Affected: PyPI: apache-airflow

If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG jobs. This issue affects Apache Airflow < 2.1.2.