https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:27:36 +0000 https://cve.radiocsirt.org/vuln/bit-airflow-2024-41937 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2024-41937 https://cve.radiocsirt.org/vuln/cnvd-2024-39151 cnvd-2024-39151 https://cve.radiocsirt.org/vuln/cnvd-2024-39151 https://cve.radiocsirt.org/vuln/euvd-2026-224170 EUVD-2026-224170 https://cve.radiocsirt.org/vuln/euvd-2026-224170 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41937 <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41937 https://cve.radiocsirt.org/vuln/ghsa-w7cp-g8v7-r54m <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-w7cp-g8v7-r54m https://cve.radiocsirt.org/vuln/pysec-2024-181 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2024-181