Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-25141
9.1
CRITICALCVSS v3
Published
February 20, 2024
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
When ssl was enabled for Mongo Hook, default settings included "allow_insecure" which caused that certificates were not validated. This was unexpected and undocumented. Users are recommended to upgrade to version 4.0.0, which fixes this issue.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflowsNVD