https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:23:34.398445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-50783 CVE-2023-50783 — Apache Airflow: Improper access control vulnerability on the "varimport" endpoint 2026-10-02T23:23:34.400053+00:00

Affected: Apache Software Foundation Apache Airflow

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue

 https://cve.radiocsirt.org/vuln/ghsa-5938-79hg-xh3q GHSA-5938-79hg-xh3q — Apache Airflow Improper Access Control vulnerability 2026-10-02T23:23:34.400103+00:00

Affected: PyPI: apache-airflow

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue.