https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:30:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04611 bdu:2022-04611 https://cve.radiocsirt.org/vuln/bdu:2022-04611 https://cve.radiocsirt.org/vuln/bit-airflow-2020-11982 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2020-11982 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/cnvd-2020-44094 cnvd-2020-44094 https://cve.radiocsirt.org/vuln/cnvd-2020-44094 https://cve.radiocsirt.org/vuln/euvd-2026-40997 EUVD-2026-40997 https://cve.radiocsirt.org/vuln/euvd-2026-40997 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11982 <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11982 https://cve.radiocsirt.org/vuln/ghsa-9g2w-5f3v-mfmm <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> https://cve.radiocsirt.org/vuln/ghsa-9g2w-5f3v-mfmm https://cve.radiocsirt.org/vuln/gsd-2020-11982 gsd-2020-11982 https://cve.radiocsirt.org/vuln/gsd-2020-11982 https://cve.radiocsirt.org/vuln/pysec-2020-16 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.</p> https://cve.radiocsirt.org/vuln/pysec-2020-16