Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-43985

Fixed upstream EPSS 2%CVSS 6.1

In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.

Published 2022-11-02 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	apache-airflow	2.4.2rc1
PyPI	apache-airflow	2.4.2