Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-40604

Fixed upstream EPSS 2%CVSS 7.5

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

Published 2022-09-21 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.4.0rc1
PyPI	apache-airflow	2.4.0b1