Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-38054

Fixed upstream EPSS 2%

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.

Published 2022-09-02 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.3.4rc1