https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:27:03 +0000 https://cve.radiocsirt.org/vuln/cve-2022-38170 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.</p> https://cve.radiocsirt.org/vuln/cve-2022-38170 https://cve.radiocsirt.org/vuln/pysec-2022-261 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.</p> https://cve.radiocsirt.org/vuln/pysec-2022-261