https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:21:43.757918+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-30911 CVE-2026-30911 — Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization 2026-10-04T10:21:43.759664+00:00

Affected: Apache Software Foundation Apache Airflow

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

 https://cve.radiocsirt.org/vuln/ghsa-8x34-9q3v-h7g8 GHSA-8x34-9q3v-h7g8 — Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization 2026-10-04T10:21:43.759751+00:00

Affected: PyPI: apache-airflow

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.