https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:15:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-225043 EUVD-2026-225043 https://cve.radiocsirt.org/vuln/euvd-2026-225043 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27018 <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow MySQL Provider.</p> <p>When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.</p> <p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow MySQL Provider.</p> <p>When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.</p> <p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27018 https://cve.radiocsirt.org/vuln/ghsa-hhm6-jjf4-6pm3 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-mysql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow MySQL Provider.</p> <p>When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.</p> <p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-mysql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow MySQL Provider.</p> <p>When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.</p> <p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-hhm6-jjf4-6pm3 https://cve.radiocsirt.org/vuln/pysec-2026-1151 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-mysql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow MySQL Provider.</p> <p>When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.</p> <p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-mysql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow MySQL Provider.</p> <p>When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.</p> <p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1151