Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 20:04:08 +0000 BIT-airflow-2021-45230 — Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver https://cve.radiocsirt.org/vuln/bit-airflow-2021-45230 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2021-45230 cnvd-2022-08280 https://cve.radiocsirt.org/vuln/cnvd-2022-08280 cnvd-2022-08280 https://cve.radiocsirt.org/vuln/cnvd-2022-08280 EUVD-2026-33243 https://cve.radiocsirt.org/vuln/euvd-2026-33243 EUVD-2026-33243 https://cve.radiocsirt.org/vuln/euvd-2026-33243 fkie_cve-2021-45230 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45230 <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-45230 GHSA-4jh2-3c85-q67h — Improper Privilege Management in apache-airflow https://cve.radiocsirt.org/vuln/ghsa-4jh2-3c85-q67h <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> https://cve.radiocsirt.org/vuln/ghsa-4jh2-3c85-q67h gsd-2021-45230 https://cve.radiocsirt.org/vuln/gsd-2021-45230 gsd-2021-45230 https://cve.radiocsirt.org/vuln/gsd-2021-45230 PYSEC-2022-11 https://cve.radiocsirt.org/vuln/pysec-2022-11 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has &#34;can_create&#34; permissions on DAG Runs can create Dag Runs for dags that they don&#39;t have &#34;edit&#34; permissions for.</p> https://cve.radiocsirt.org/vuln/pysec-2022-11