https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:37:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00709 bdu:2022-00709 https://cve.radiocsirt.org/vuln/bdu:2022-00709 https://cve.radiocsirt.org/vuln/bit-airflow-2020-11978 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2020-11978 https://cve.radiocsirt.org/vuln/cnvd-2020-42661 cnvd-2020-42661 https://cve.radiocsirt.org/vuln/cnvd-2020-42661 https://cve.radiocsirt.org/vuln/euvd-2026-256080 EUVD-2026-256080 https://cve.radiocsirt.org/vuln/euvd-2026-256080 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11978 <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11978 https://cve.radiocsirt.org/vuln/ghsa-rvmq-4x66-q7j3 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting `load_examples=False` in the config then you are not vulnerable.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting `load_examples=False` in the config then you are not vulnerable.</p> https://cve.radiocsirt.org/vuln/ghsa-rvmq-4x66-q7j3 https://cve.radiocsirt.org/vuln/gsd-2020-11978 gsd-2020-11978 https://cve.radiocsirt.org/vuln/gsd-2020-11978 https://cve.radiocsirt.org/vuln/pysec-2020-14 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.</p> https://cve.radiocsirt.org/vuln/pysec-2020-14