Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-17513

Fixed upstream EPSS 4%

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

Published 2020-12-14 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	1.10.13