https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:17:57 +0000 https://cve.radiocsirt.org/vuln/bit-airflow-2020-17515 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>The &#34;origin&#34; parameter passed to some of the endpoints like &#39;/trigger&#39; was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>The &#34;origin&#34; parameter passed to some of the endpoints like &#39;/trigger&#39; was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2020-17515 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/certfr-2022-avi-525 https://cve.radiocsirt.org/vuln/cnvd-2021-11845 cnvd-2021-11845 https://cve.radiocsirt.org/vuln/cnvd-2021-11845 https://cve.radiocsirt.org/vuln/euvd-2026-215928 EUVD-2026-215928 https://cve.radiocsirt.org/vuln/euvd-2026-215928 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17515 <p>The &#34;origin&#34; parameter passed to some of the endpoints like &#39;/trigger&#39; was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> <p>The &#34;origin&#34; parameter passed to some of the endpoints like &#39;/trigger&#39; was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-17515 https://cve.radiocsirt.org/vuln/ghsa-86vp-x3pr-79rx <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The `origin` parameter passed to some of the endpoints like `/trigger` was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.15. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The `origin` parameter passed to some of the endpoints like `/trigger` was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.15. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> https://cve.radiocsirt.org/vuln/ghsa-86vp-x3pr-79rx https://cve.radiocsirt.org/vuln/gsd-2020-17515 gsd-2020-17515 https://cve.radiocsirt.org/vuln/gsd-2020-17515 https://cve.radiocsirt.org/vuln/pysec-2020-21 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The &#34;origin&#34; parameter passed to some of the endpoints like &#39;/trigger&#39; was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The &#34;origin&#34; parameter passed to some of the endpoints like &#39;/trigger&#39; was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.</p> https://cve.radiocsirt.org/vuln/pysec-2020-21