Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-40754

Fixed upstream EPSS 2%CVSS 6.1

In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.

Published 2022-09-21 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.4.0rc1
PyPI	apache-airflow	2.4.0b1