https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:51:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04643 bdu:2022-04643 https://cve.radiocsirt.org/vuln/bdu:2022-04643 https://cve.radiocsirt.org/vuln/bit-airflow-2020-11981 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2020-11981 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/cnvd-2020-44093 cnvd-2020-44093 https://cve.radiocsirt.org/vuln/cnvd-2020-44093 https://cve.radiocsirt.org/vuln/euvd-2026-40983 EUVD-2026-40983 https://cve.radiocsirt.org/vuln/euvd-2026-40983 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11981 <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11981 https://cve.radiocsirt.org/vuln/ghsa-976r-qfjj-c24w <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> https://cve.radiocsirt.org/vuln/ghsa-976r-qfjj-c24w https://cve.radiocsirt.org/vuln/gsd-2020-11981 gsd-2020-11981 https://cve.radiocsirt.org/vuln/gsd-2020-11981 https://cve.radiocsirt.org/vuln/pysec-2020-15 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.</p> https://cve.radiocsirt.org/vuln/pysec-2020-15