https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:32:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05614 bdu:2026-05614 https://cve.radiocsirt.org/vuln/bdu:2026-05614 https://cve.radiocsirt.org/vuln/bit-airflow-2026-28563 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2026-28563 https://cve.radiocsirt.org/vuln/cnvd-2026-15158 cnvd-2026-15158 https://cve.radiocsirt.org/vuln/cnvd-2026-15158 https://cve.radiocsirt.org/vuln/euvd-2026-276380 EUVD-2026-276380 https://cve.radiocsirt.org/vuln/euvd-2026-276380 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28563 <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28563 https://cve.radiocsirt.org/vuln/ghsa-x3fv-96qh-67m7 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-x3fv-96qh-67m7 https://cve.radiocsirt.org/vuln/pysec-2026-15 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-15 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0755 <p>Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0755