Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-50944

Fixed upstream EPSS <1%CVSS 6.5

Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.

Published 2024-01-24 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

EcosystemPackageFixed in
PyPIapache-airflow2.8.1rc1
PyPIapache-airflow2.8.1