https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:11:59 +0000 https://cve.radiocsirt.org/vuln/bit-airflow-2026-33858 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2026-33858 https://cve.radiocsirt.org/vuln/euvd-2026-291069 EUVD-2026-291069 https://cve.radiocsirt.org/vuln/euvd-2026-291069 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33858 <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33858 https://cve.radiocsirt.org/vuln/ghsa-mc4f-r875-v87w <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-mc4f-r875-v87w https://cve.radiocsirt.org/vuln/pysec-2026-20 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.</p> <p>Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-20 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1073 <p>Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um beliebigen Programmcode auszuführen oder nicht näher spezifizierte Auswirkungen zu erreichen, wodurch möglicherweise Sicherheitsmaßnahmen umgangen werden.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um beliebigen Programmcode auszuführen oder nicht näher spezifizierte Auswirkungen zu erreichen, wodurch möglicherweise Sicherheitsmaßnahmen umgangen werden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1073