https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:51:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00683 bdu:2026-00683 https://cve.radiocsirt.org/vuln/bdu:2026-00683 https://cve.radiocsirt.org/vuln/bit-airflow-2025-68438 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> https://cve.radiocsirt.org/vuln/bit-airflow-2025-68438 https://cve.radiocsirt.org/vuln/cnvd-2026-09790 cnvd-2026-09790 https://cve.radiocsirt.org/vuln/cnvd-2026-09790 https://cve.radiocsirt.org/vuln/euvd-2026-265931 EUVD-2026-265931 https://cve.radiocsirt.org/vuln/euvd-2026-265931 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68438 <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68438 https://cve.radiocsirt.org/vuln/ghsa-3qmm-r55x-hpxx <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> https://cve.radiocsirt.org/vuln/ghsa-3qmm-r55x-hpxx https://cve.radiocsirt.org/vuln/pysec-2026-9 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.</p> <p>Users are recommended to upgrade to 3.1.6 or later, which fixes this issue</p> https://cve.radiocsirt.org/vuln/pysec-2026-9