https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:59:00 +0000 https://cve.radiocsirt.org/vuln/cve-2024-42447 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow Providers FAB</p> <p>Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB.</p> <p>This issue affects Apache Airflow Providers FAB: 1.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out.</p> <p>* FAB provider 1.2.1 only affected Airflow 2.9.3 (earlier and later versions of Airflow are not affected)</p> <p>* FAB provider 1.2.0 affected all versions of Airflow.</p> <p>Users who run Apache Airflow 2.9.3 are recommended to upgrade to Apache Airflow Providers FAB version 1.2.2 which fixes the issue.</p> <p>Users who run Any Apache Airflow version and have FAB provider 1.2.0 are recommended to upgrade to Apache Airflow Providers FAB version 1.2.2 which fixes the issue.</p> <p>Also upgrading Apache Airflow to latest version available is recommended.</p> <p>Note: Early version of Airflow reference container images of Airflow 2.9.3 and constraint files contained FAB provider 1.2.1 version, but this is fixed in updated versions of the images.</p> <p>Users are advised to pull the latest Airflow images or reinstall FAB provider according to the current constraints.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow Providers FAB</p> <p>Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB.</p> <p>This issue affects Apache Airflow Providers FAB: 1.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out.</p> <p>* FAB provider 1.2.1 only affected Airflow 2.9.3 (earlier and later versions of Airflow are not affected)</p> <p>* FAB provider 1.2.0 affected all versions of Airflow.</p> <p>Users who run Apache Airflow 2.9.3 are recommended to upgrade to Apache Airflow Providers FAB version 1.2.2 which fixes the issue.</p> <p>Users who run Any Apache Airflow version and have FAB provider 1.2.0 are recommended to upgrade to Apache Airflow Providers FAB version 1.2.2 which fixes the issue.</p> <p>Also upgrading Apache Airflow to latest version available is recommended.</p> <p>Note: Early version of Airflow reference container images of Airflow 2.9.3 and constraint files contained FAB provider 1.2.1 version, but this is fixed in updated versions of the images.</p> <p>Users are advised to pull the latest Airflow images or reinstall FAB provider according to the current constraints.</p> https://cve.radiocsirt.org/vuln/cve-2024-42447