Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:21:38 +0000 BIT-airflow-2022-24288 — Apache Airflow: RCE in example DAGs https://cve.radiocsirt.org/vuln/bit-airflow-2022-24288 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2022-24288 cnvd-2022-18263 https://cve.radiocsirt.org/vuln/cnvd-2022-18263 cnvd-2022-18263 https://cve.radiocsirt.org/vuln/cnvd-2022-18263 EUVD-2026-14109 https://cve.radiocsirt.org/vuln/euvd-2026-14109 EUVD-2026-14109 https://cve.radiocsirt.org/vuln/euvd-2026-14109 fkie_cve-2022-24288 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24288 <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24288 GHSA-3v7g-4pg3-7r6j — OS Command injection in Apache Airflow https://cve.radiocsirt.org/vuln/ghsa-3v7g-4pg3-7r6j <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> https://cve.radiocsirt.org/vuln/ghsa-3v7g-4pg3-7r6j gsd-2022-24288 https://cve.radiocsirt.org/vuln/gsd-2022-24288 gsd-2022-24288 https://cve.radiocsirt.org/vuln/gsd-2022-24288 PYSEC-2022-30 https://cve.radiocsirt.org/vuln/pysec-2022-30 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.</p> https://cve.radiocsirt.org/vuln/pysec-2022-30