Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 14:37:46 +0000 CVE-2023-35798 — Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability https://cve.radiocsirt.org/vuln/cve-2023-35798 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider</p> <p>Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.</p> <p>This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.</p> <p>It is recommended to upgrade to a version that is not affected</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider</p> <p>Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.</p> <p>This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.</p> <p>It is recommended to upgrade to a version that is not affected</p> https://cve.radiocsirt.org/vuln/cve-2023-35798 GHSA-q57w-826p-46jr — Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability https://cve.radiocsirt.org/vuln/ghsa-q57w-826p-46jr <p><strong>Affected:</strong> PyPI: apache-airflow-providers-odbc, PyPI: apache-airflow-providers-microsoft-mssql</p> <p>Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.</p> <p>This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.</p> <p>It is recommended to upgrade to a version that is not affected</p> <p><strong>Affected:</strong> PyPI: apache-airflow-providers-odbc, PyPI: apache-airflow-providers-microsoft-mssql</p> <p>Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.</p> <p>This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.</p> <p>It is recommended to upgrade to a version that is not affected</p> https://cve.radiocsirt.org/vuln/ghsa-q57w-826p-46jr