Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-24288

Fixed upstream EPSS 78%

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.

Published 2022-02-25 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.2.4