https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:31:00.484078+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-11978 CVE-2020-11978 2026-10-04T09:31:00.486594+00:00

Affected: Apache Software Foundation Apache Airflow

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-rvmq-4x66-q7j3 GHSA-rvmq-4x66-q7j3 — Remote code execution (RCE) in Apache Airflow 2026-10-04T09:31:00.486647+00:00

Affected: PyPI: apache-airflow

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting `load_examples=False` in the config then you are not vulnerable.