https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T09:33:34.227031+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-40272 CVE-2023-40272 — Apache Airflow Spark Provider Arbitrary File Read via JDBC 2026-10-17T09:33:34.266261+00:00

Affected: Apache Software Foundation Apache Airflow Spark Provider, apache-airflow-providers-apache-drill

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected.

 https://cve.radiocsirt.org/vuln/pysec-2026-1141 PYSEC-2026-1141 — Apache Airflow Spark Provider Improper Input Validation vulnerability 2026-10-17T09:33:34.266339+00:00

Affected: PyPI: apache-airflow-providers-apache-spark

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected.