Mittel
CVE-2026-22922
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 205
Filter zurücksetzen
Hoch
CVE-2025-68675
Apache Airflow proxy credentials for various providers might leak in task logs
Hoch
CVE-2025-68438
Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated
Kritisch
CVE-2025-67895
Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context
Mittel
CVE-2025-66388
A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without t
Mittel
CVE-2025-62503
Apache Airflow's create action can upsert existing Pools/Connections/Variables
Mittel
CVE-2025-54941
Apache Airflow has a command injection vulnerability in "example_dag_decorator"
Mittel
CVE-2025-62402
Apache Airflow `/api/v2/dagReports` executes DAG Python in API
Mittel
CVE-2025-54831
Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively
Kritisch
CVE-2025-50213
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.
Hoch
CVE-2024-45784
Apache Airflow: Sensitive configuration values are not masked in the logs by default
Hoch
CVE-2024-45498
Apache Airflow vulnerable to Improper Encoding or Escaping of Output
Hoch
CVE-2024-45034
Apache Airflow vulnerable to Execution with Unnecessary Privileges
Mittel
CVE-2024-41937
Apache Airflow Cross-site Scripting Vulnerability
Niedrig
CVE-2024-42447
Apache Airflow Providers FAB Insufficient Session Expiration vulnerability
Hoch
CVE-2024-39877
Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler
Mittel
CVE-2024-39863
Apache Airflow Potential Cross-site Scripting Vulnerability
Niedrig
CVE-2024-25142
Apache Airflow does not return the "Cache-Control" header for dynamic content
Mittel
CVE-2024-32077
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Mittel
CVE-2024-31869
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
Mittel
CVE-2024-29735
Apache Airflow Improper Preservation of Permissions vulnerability
Mittel
CVE-2024-28746
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which t
Mittel
CVE-2024-26280
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permit
Mittel
CVE-2024-27906
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.