https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:22:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05966 bdu:2023-05966 https://cve.radiocsirt.org/vuln/bdu:2023-05966 https://cve.radiocsirt.org/vuln/cnvd-2023-70278 cnvd-2023-70278 https://cve.radiocsirt.org/vuln/cnvd-2023-70278 https://cve.radiocsirt.org/vuln/euvd-2026-189714 EUVD-2026-189714 https://cve.radiocsirt.org/vuln/euvd-2026-189714 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27604 <p>Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.</p> <p>It is recommended to upgrade to a version that is not affected. This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.</p> <p>Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.</p> <p>It is recommended to upgrade to a version that is not affected. This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-27604 https://cve.radiocsirt.org/vuln/ghsa-g3m9-pr5m-4cvp <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-sqoop</p> <p>Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.</p> <p>It is recommended to upgrade to a version that is not affected. This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-sqoop</p> <p>Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.</p> <p>It is recommended to upgrade to a version that is not affected. This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.</p> https://cve.radiocsirt.org/vuln/ghsa-g3m9-pr5m-4cvp https://cve.radiocsirt.org/vuln/gsd-2023-27604 gsd-2023-27604 https://cve.radiocsirt.org/vuln/gsd-2023-27604 https://cve.radiocsirt.org/vuln/pysec-2026-1142 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-sqoop</p> <p>Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.</p> <p>It is recommended to upgrade to a version that is not affected. This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-sqoop</p> <p>Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.</p> <p>It is recommended to upgrade to a version that is not affected. This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1142