Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-41672

Fixed upstream EPSS 1%

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

Published 2022-10-07 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.4.1rc1
PyPI	apache-airflow	2.4.2rc1