https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 13:52:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04368 bdu:2023-04368 https://cve.radiocsirt.org/vuln/bdu:2023-04368 https://cve.radiocsirt.org/vuln/euvd-2026-194637 EUVD-2026-194637 https://cve.radiocsirt.org/vuln/euvd-2026-194637 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33234 <p>Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.</p> <p>In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner.  Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.</p> <p>Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.</p> <p>In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner.  Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-33234 https://cve.radiocsirt.org/vuln/ghsa-2rx4-9f5h-9gjf <p><strong>Affected:</strong> PyPI: apache-airflow-providers-cncf-kubernetes</p> <p>Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.</p> <p>In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner. Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-cncf-kubernetes</p> <p>Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.</p> <p>In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner. Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-2rx4-9f5h-9gjf https://cve.radiocsirt.org/vuln/gsd-2023-33234 gsd-2023-33234 https://cve.radiocsirt.org/vuln/gsd-2023-33234 https://cve.radiocsirt.org/vuln/pysec-2026-1143 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-cncf-kubernetes</p> <p>Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.</p> <p>In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner. Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-cncf-kubernetes</p> <p>Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.</p> <p>In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner. Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1143