Most recent entries from all

bdu:2026-05615

BIT-airflow-2026-30911 — Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Affected: Bitnami: airflow

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

cnvd-2026-15157

EUVD-2026-276341

fkie_cve-2026-30911

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

GHSA-8x34-9q3v-h7g8 — Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Affected: PyPI: apache-airflow

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

PYSEC-2026-17

Affected: PyPI: apache-airflow

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

WID-SEC-W-2026-0755 — Apache Airflow: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.