https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:29:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00754 bdu:2024-00754 https://cve.radiocsirt.org/vuln/bdu:2024-00754 https://cve.radiocsirt.org/vuln/bit-airflow-2023-50943 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2023-50943 https://cve.radiocsirt.org/vuln/cnvd-2024-26531 cnvd-2024-26531 https://cve.radiocsirt.org/vuln/cnvd-2024-26531 https://cve.radiocsirt.org/vuln/euvd-2026-242028 EUVD-2026-242028 https://cve.radiocsirt.org/vuln/euvd-2026-242028 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50943 <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-50943 https://cve.radiocsirt.org/vuln/ghsa-c3c6-f2ww-xfr2 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-c3c6-f2ww-xfr2 https://cve.radiocsirt.org/vuln/gsd-2023-50943 gsd-2023-50943 https://cve.radiocsirt.org/vuln/gsd-2023-50943 https://cve.radiocsirt.org/vuln/pysec-2024-13 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/pysec-2024-13