Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-62503

Fixed upstream EPSS <1%CVSS 4.6

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.

Published 2025-10-30 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream

EcosystemPackageFixed in
PyPIapache-airflow3.1.1