CVE-2024-32077
Fixed upstream EPSS 2%CVSS 5.4
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue.
Products: Apache Software Foundation Apache Airflow, Apache Airflow
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | apache-airflow | 2.9.1 |
| PyPI | apache-airflow | no fix |