https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:57:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05809 bdu:2023-05809 https://cve.radiocsirt.org/vuln/bdu:2023-05809 https://cve.radiocsirt.org/vuln/cnvd-2023-85613 cnvd-2023-85613 https://cve.radiocsirt.org/vuln/cnvd-2023-85613 https://cve.radiocsirt.org/vuln/euvd-2026-216789 EUVD-2026-216789 https://cve.radiocsirt.org/vuln/euvd-2026-216789 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41267 <p>In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1</p> <p>In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-41267 https://cve.radiocsirt.org/vuln/ghsa-5hj9-m76g-xrc8 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-hdfs</p> <p>In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-hdfs</p> <p>In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1</p> https://cve.radiocsirt.org/vuln/ghsa-5hj9-m76g-xrc8 https://cve.radiocsirt.org/vuln/gsd-2023-41267 gsd-2023-41267 https://cve.radiocsirt.org/vuln/gsd-2023-41267 https://cve.radiocsirt.org/vuln/pysec-2026-1138 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-hdfs</p> <p>In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-apache-hdfs</p> <p>In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1</p> https://cve.radiocsirt.org/vuln/pysec-2026-1138