Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-62402
5.4
MEDIUMCVSS v3
Published
October 30, 2025
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows>= 3.0.0, < 3.1.1NVD