Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 05:43:00 +0000 BIT-airflow-2025-62402 — Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API https://cve.radiocsirt.org/vuln/bit-airflow-2025-62402 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> https://cve.radiocsirt.org/vuln/bit-airflow-2025-62402 EUVD-2026-271354 https://cve.radiocsirt.org/vuln/euvd-2026-271354 EUVD-2026-271354 https://cve.radiocsirt.org/vuln/euvd-2026-271354 fkie_cve-2025-62402 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62402 <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62402 GHSA-273c-4g26-4jpm — Apache Airflow `/api/v2/dagReports` executes DAG Python in API https://cve.radiocsirt.org/vuln/ghsa-273c-4g26-4jpm <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> https://cve.radiocsirt.org/vuln/ghsa-273c-4g26-4jpm PYSEC-2026-1129 — Apache Airflow `/api/v2/dagReports` executes DAG Python in API https://cve.radiocsirt.org/vuln/pysec-2026-1129 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1129