https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:38:18.827102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-13944 CVE-2020-13944 2026-10-05T15:38:18.858755+00:00

Affected: Apache Airflow

In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.

 https://cve.radiocsirt.org/vuln/ghsa-4pwq-fj89-6rjc GHSA-4pwq-fj89-6rjc — Apache Airflow Cross-site Scripting 2026-10-05T15:38:18.858816+00:00

Affected: PyPI: apache-airflow

In Apache Airflow < 1.10.12, the `origin` parameter passed to some of the endpoints like `/trigger` and was vulnerable to a XSS exploit.