Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41672
8.1
HIGHCVSS v3
Published
October 7, 2022
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows<= 2.4.1NVD