https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 02:21:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04085 bdu:2025-04085 https://cve.radiocsirt.org/vuln/bdu:2025-04085 https://cve.radiocsirt.org/vuln/euvd-2026-273196 EUVD-2026-273196 https://cve.radiocsirt.org/vuln/euvd-2026-273196 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30473 <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow Common SQL Provider.</p> <p>When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.</p> <p>This issue affects Apache Airflow Common SQL Provider: before 1.24.1.</p> <p>Users are recommended to upgrade to version 1.24.1, which fixes the issue.</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow Common SQL Provider.</p> <p>When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.</p> <p>This issue affects Apache Airflow Common SQL Provider: before 1.24.1.</p> <p>Users are recommended to upgrade to version 1.24.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-30473 https://cve.radiocsirt.org/vuln/ghsa-5r62-mjf5-xwhj <p><strong>Affected:</strong> PyPI: apache-airflow-providers-common-sql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow Common SQL Provider.</p> <p>When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.</p> <p>This issue affects Apache Airflow Common SQL Provider: before 1.24.1.</p> <p>Users are recommended to upgrade to version 1.24.1, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-common-sql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow Common SQL Provider.</p> <p>When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.</p> <p>This issue affects Apache Airflow Common SQL Provider: before 1.24.1.</p> <p>Users are recommended to upgrade to version 1.24.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-5r62-mjf5-xwhj https://cve.radiocsirt.org/vuln/pysec-2026-1145 <p><strong>Affected:</strong> PyPI: apache-airflow-providers-common-sql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow Common SQL Provider.</p> <p>When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.</p> <p>This issue affects Apache Airflow Common SQL Provider: before 1.24.1.</p> <p>Users are recommended to upgrade to version 1.24.1, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-common-sql</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in Apache Airflow Common SQL Provider.</p> <p>When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.</p> <p>This issue affects Apache Airflow Common SQL Provider: before 1.24.1.</p> <p>Users are recommended to upgrade to version 1.24.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1145