Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-17835

Fixed upstream EPSS 2%

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.

Published 2019-01-23 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

EcosystemPackageFixed in
PyPIapache-airflow1.9.0