https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 23:12:32 +0000 https://cve.radiocsirt.org/vuln/bit-airflow-2021-38540 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2021-38540 https://cve.radiocsirt.org/vuln/cnvd-2022-62076 cnvd-2022-62076 https://cve.radiocsirt.org/vuln/cnvd-2022-62076 https://cve.radiocsirt.org/vuln/euvd-2026-30311 EUVD-2026-30311 https://cve.radiocsirt.org/vuln/euvd-2026-30311 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38540 <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-38540 https://cve.radiocsirt.org/vuln/ghsa-h88f-r7cw-8fv3 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> https://cve.radiocsirt.org/vuln/ghsa-h88f-r7cw-8fv3 https://cve.radiocsirt.org/vuln/gsd-2021-38540 gsd-2021-38540 https://cve.radiocsirt.org/vuln/gsd-2021-38540 https://cve.radiocsirt.org/vuln/pysec-2021-326 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>The variable import endpoint was not protected by authentication in Airflow &gt;=2.0.0, &lt;2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution. This issue affects Apache Airflow &gt;=2.0.0, &lt;2.1.3.</p> https://cve.radiocsirt.org/vuln/pysec-2021-326