Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-39863
5.4
MEDIUMCVSS v3
Published
July 17, 2024
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows< 2.9.3NVD