Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:43:39 +0000 CVE-2023-50943 — Apache Airflow: Potential pickle deserialization vulnerability in XComs https://cve.radiocsirt.org/vuln/cve-2023-50943 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/cve-2023-50943 GHSA-c3c6-f2ww-xfr2 — Apache Airflow: pickle deserialization vulnerability in XComs https://cve.radiocsirt.org/vuln/ghsa-c3c6-f2ww-xfr2 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of &#34;enable_xcom_pickling=False&#34; configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-c3c6-f2ww-xfr2