https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:15:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07044 bdu:2023-07044 https://cve.radiocsirt.org/vuln/bdu:2023-07044 https://cve.radiocsirt.org/vuln/bit-airflow-2023-42792 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2023-42792 https://cve.radiocsirt.org/vuln/cnvd-2023-80561 cnvd-2023-80561 https://cve.radiocsirt.org/vuln/cnvd-2023-80561 https://cve.radiocsirt.org/vuln/euvd-2026-216826 EUVD-2026-216826 https://cve.radiocsirt.org/vuln/euvd-2026-216826 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42792 <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42792 https://cve.radiocsirt.org/vuln/ghsa-j3w8-2p2h-mrr9 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-j3w8-2p2h-mrr9 https://cve.radiocsirt.org/vuln/gsd-2023-42792 gsd-2023-42792 https://cve.radiocsirt.org/vuln/gsd-2023-42792 https://cve.radiocsirt.org/vuln/pysec-2023-203 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2023-203