Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-43982

Fixed upstream EPSS 2%CVSS 6.1

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

Published 2022-11-02 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.4.2rc1
PyPI	apache-airflow	2.4.2