https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 15:49:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00574 bdu:2024-00574 https://cve.radiocsirt.org/vuln/bdu:2024-00574 https://cve.radiocsirt.org/vuln/bit-airflow-2023-48291 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2023-48291 https://cve.radiocsirt.org/vuln/cnvd-2024-01014 cnvd-2024-01014 https://cve.radiocsirt.org/vuln/cnvd-2024-01014 https://cve.radiocsirt.org/vuln/euvd-2026-216932 EUVD-2026-216932 https://cve.radiocsirt.org/vuln/euvd-2026-216932 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48291 <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-48291 https://cve.radiocsirt.org/vuln/ghsa-8f57-wcmg-4jmh <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-8f57-wcmg-4jmh https://cve.radiocsirt.org/vuln/gsd-2023-48291 gsd-2023-48291 https://cve.radiocsirt.org/vuln/gsd-2023-48291 https://cve.radiocsirt.org/vuln/pysec-2023-265 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2023-265